Find your next role

Introduction
IBM Infrastructure is a catalyst that makes the world work better because our clients demand it. Heterogeneous environments, the explosion of data, digital automation, and cybersecurity threats require hybrid cloud infrastructure that only IBM can provide.

Your ability to be creative, a forward-thinker and to focus on innovation that matters, is all support by our growth minded culture as we continue to drive career development across our teams. Collaboration is key to IBM Infrastructure success, as we bring together different business units and teams that balance their priorities in a way that best serves our client’s needs.

IBM’s product and technology landscape includes Research, Software, and Infrastructure. Entering this domain positions you at the heart of IBM, where growth and innovation thrive.

Your Role and Responsibilities
The CISO Remediation Team is looking for a Security Architect, who can take on a leadership role in responding to security issues across a large enterprise, multiple offerings and various lines of business. The right candidate must thrive in high-pressure situations, think like both an attacker and defender, and drive engineering, development and business teams to take the right actions in the right time frames to mitigate risks.

We are looking for an individual who can balance technical risks against business risks and consistently drive for the right results. Have passion for engineering solutions to complex security challenges, recognize and fill gaps from a defense in depth perspective.

The successful candidate will have a good mix of deep technical knowledge, a demonstrated background in Information Technology and Security. We value broad and deep technical knowledge, specifically in any one of these fields: Cryptography, Network, Infrastructure, Software Security, CICD Pipelines, Virtualization, Cloud-Native Technologies and Cloud Infrastructure, Application Security, Malware Analysis, Forensics, Security Operations, Incident Response, and emerging technologies.

Key duties:

• The duties outline the tasks and goals for which the Security Architect is responsible:
• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives for multiple lines of business
• Advise, Design, implement enterprise-class security systems for production environments, both internal and external to IBM
• Align company standards, frameworks and security with overall business and technology strategy
• Identify and communicate current and emerging security threats
• Design security architecture elements to mitigate threats as they emerge
• Create solutions that balance business requirements with company information and IBM security requirements
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Exceptional communication skills with diverse audiences – Strong critical thinking, analytical skills and empathy
• General skills include:
• Business Awareness: You have an understanding about the business that you’re trying to secure. For example, working knowledge of cloud technologies, the ablity to describe what the security concerns and impact might be for an organization looking to move from on-premises compute to public cloud

General skills include:

• Business Awareness: You have an understanding about the business that you’re trying to secure. For example, working knowledge of cloud technologies, the ablity to describe what the security concerns and impact might be for an organization looking to move from on-premises compute to public cloud
• Distributed Systems / Software Design: understand the compromises that teams make every day in order to make things work. Security Architects should have strong opinions about the right way to build
• Threats, Risks, and Modeling: know the difference between threats and risks. The ability to understand what organizations need to protect, who they need to protect it from, and how that protection should work
• Vulnerabilities and Exploitation: the ability to discern between a weakness, flaw, or error found within a system, software, host, etc that has the potential to be leveraged by an attacker in order to compromise a network, application, an infrastructure, etc.
• Focus of Collaboration: being personable, approachable, and empathetic are extremely valuable qualities in a Security Architect. The Security Architect role requires a lot of cooperation and engagement within the organization and lines of businesses that they support

Required Technical and Professional Expertise

• Advise and experience with Info Technologies & SEC Techniques
• Experience with IBM Security Portfolio & Experience
• Experience with IT SEC Risk Management Methodologies & Tools
• Experience and apply SEC Concepts & Principles
• Experience with Architect SEC Subsystems

Preferred Technical and Professional Expertise
Depending on the area of work, the Security Architect may perform evaluation and selection of the components, design of hardware, software, process and service components of the solution, assurance of deployment architectures, and guide secure engineering practices in development.