Application & Cloud Security Consultant

Stack

Responsibilities

• ▹Drive Secure SDLC adoption across development programs
• ▹Support implementation of DevSecOps tooling and automated security controls
• ▹Perform application security assessments and architecture reviews
• ▹Define secure coding standards and developer awareness initiatives
• ▹Monitor application security posture and support remediation efforts
• ▹Collaborate with cloud, infrastructure and development teams to reduce application-related risks
• ▹Cloud security hardening: assist in implementing cloud security controls, governance models and remediation plans across Azure, GCP and AWS
• ▹Support the deployment and optimization of modern secure access solutions (e.g. ZScaler, Netskope) aligned with Zero Trust principles
• ▹Identify security gaps, propose remediation roadmaps and help ensure compliance with organizational security policies and industry standards

Requirements

• ▹5+ years of experience in Cybersecurity Services, focused on Application Security, Cloud Security and Secure Software Development Lifecycle (Secure SDLC)
• ▹Proven experience within enterprise-scale cloud and hybrid environments
• ▹Secure SDLC governance: definition and implementation of secure development frameworks and security gates
• ▹DevSecOps automation: integrating security tools into CI/CD platforms and developer workflows
• ▹Application security testing: SAST, DAST, API security testing, SCA and container security assessments
• ▹Cloud security architecture: deep understanding of Azure, AWS and cloud-native security controls (identity, networking, encryption, workload protection)
• ▹Cloud Security Posture Management (CSPM): assessing and improving cloud configurations, policies and governance frameworks
• ▹Understanding of SASE and Zero Trust architectures: SSE, SWG, CASB, ZTNA
• ▹Threat modeling and risk assessment
• ▹Documentation and stakeholder management skills, communicating security requirements clearly

Nice to have

• ▹Highly desired certifications: CCSK, CCSP, AZ-500, AWS Certified Security - Specialty, Kubernetes Security Specialist (CKS)
• ▹Secure SDLC, DevSecOps or cloud security certifications

Soft skills

What we offer

• ▹Dynamic, hybrid-friendly culture
• ▹Be Well programs supporting financial, mental, physical and social health
• ▹Personalized development goals and continuous feedback
• ▹Learning opportunities including certifications with Microsoft, Google and Amazon, coaching and hands-on experience

About the company

Kyndryl runs and reimagines the mission-critical technology systems of leading businesses.