Security Consultant-Security Strategy, Risk & Compliance Services

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. As an Associate Security Consultant, you'll unleash your exceptional technical prowess to gather and analyze business and technical requirements, skillfully crafting and implementing resilient Enterprise-wide Access Management processes and procedures. 1. Perform security vulnerability assessment and analysis associated with cyber security area. 2. Work closely with clients to effectively manage the cyber risks they face, aligning security strategies with their business needs through innovative ideas and cutting-edge technologies. Your responsibilities may encompass: 1. 10+ years of professional experience in vulnerability diagnostics across web applications, mobile apps, and infrastructure based on OWASP Top 10 and other relevant standards. 2. Assess cloud infrastructure security (AWS, GCP, Azure) and identify configuration and design weaknesses specific to cloud environments. 3. Perform static and dynamic source code analysis (SAST/DAST), and scan for insecure third-party/open-source components (SCA). 4. Conduct white-box, gray-box, and black-box penetration tests tailored to scope and risk profile. 5. Develop exploit code and technical proof-of-concepts (PoCs) to validate and demonstrate identified vulnerabilities. 6, Produce practical remediation recommendations and mitigation strategies for discovered issues, including prioritized action plans for development and operations teams. 7. Conduct technical vulnerability assessments and security evaluations for critical information & communication infrastructure. Requirements * Strong problem-solving skills driven by a genuine interest and passion for emerging technologies * Familiarity with Application & Infrastructure Vulnerability Assessment, Analysis, and Remediation and Penetration Testing and Exploit Development. * Language proficiency: Native Korean, Business level in English * Malicious code reverse engineering * Forensic performing experience (encase , FTK and others tools) Korea, Republic of Consulting Hybrid Professional Seoul, KR (0079) IBM Korea, Inc.