Security Lead Engineer

IBM Security Lead Engineer in San Jose, California

Introduction

A career in IBM Software means you'll be part of a team that transforms our customer's challenges into solutions. Seeking new possibilities and always staying curious, we are a team dedicated to creating the world's leading AI-powered, cloud-native software solutions for our customers.

We are seeking a skilled back-end developer to join our IBM Software team. As part of our team, you will be responsible for developing and maintaining high-quality software products, working with a variety of technologies and programming languages.

Your Role and Responsibilities

This position is for the Security and Compliance lead on our team, who will take on varied responsibilities in assuring the security and compliance of IBM watsonx Assistant and watsonx Orchestrate. The candidate should have a passion for working with engineering teams daily on security related issues, has a willingness to learn, and recognizes and fills gaps related to defined security controls that must be implemented as part of our defined business processes.

Key responsibilities include:

1. Ensures IBM software meets regulatory and security compliance requirements.
2. Strive to reduce risk and maintain compliance to IBM's IT Security Standards.
3. Identify security design gaps in existing and proposed architectures, and provide recommendations on security related decisions and improvements.
4. Supports other compliance focal points by participating in security reviews/audits and providing compliance evidence, as required.
5. Assist in coordination to address vulnerabilities and penetration type testing activities.
6. Act as a primary security contact for IBM watsonx Assistant and watsonx Orchestrate.

Required Technical and Professional Expertise

1. Experience working in security areas dealing with secure engineering, security controls, vulnerabilities, and audits.
2. Working knowledge of cloud technologies with the ability to describe security concerns and what the impact might be for an organization.
3. Good communication and critical thinking skills.

Preferred Technical and Professional Expertise

1. Kubernetes/Containers experience, command line knowledge.
2. External audit standards and process knowledge (ISO 27K, HIPAA, PCI-DSS, SOC 2, FedRAMP).
3. General development, scripting knowledge and use of APIs for utilities, comfortable with GitHub and ZenHub, experience with code scanning and analysis of results.
4. Familiarity with IBM Cloud, Red Hat OpenShift Platforms or other Public Cloud platforms.

About IBM

IBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Being You @ IBM

IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics.