Apptio - Senior Security Engineer

Introduction
At IBM, work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so, lets talk.

Your Role and Responsibilities
The Apptio Security Engineer role will support the Apptio Product and Engineering organization in identifying, managing, and resolving security vulnerabilities. This role will work closely with Apptio security, Apptio product and engineering, and IBM corporate security teams. They will play a critical role in engaging with engineering teams to identify, prioritize, and execute remediation plans and maintain an effective security posture.

Responsibilities:

Security and Compliance Expertise: Understands attack vectors, security weaknesses, and compliance requirements.
Proactive Risk Mitigation: Continuously identifies and addresses security vulnerabilities in the service or product.
Compliance Adherence: Ensures the service or product meets IBM’s IT Security Standard and industry regulations.
Communication and Collaboration: Effectively communicates with stakeholders, including GM Security Focal, Offering Manager, and DevOps teams.
Process Management: Leads burndown efforts on security metrics, shepherds the service through security processes, and ensures adherence to security portions of the Service Contract.
Documentation and Evidence: Documents exceptions, deviations, and compliance evidence as required.
Audit Participation: Participates in security reviews and audits, providing necessary compliance evidence.
Risk Assessment and Reporting: Reports security issues to relevant stakeholders and provides recommendations for improvements.
Compliance Management: Manages compliance-related activities, including audits, evidence, and communication.
DevOps Engagement: Ensures DevOps teams are involved in implementing security and compliance policies.
Privileged Access Management: Manages compliance-related Privileged Access Groups.
Knowledge of Service Contacts and Processes: Has a good understanding of key contacts and processes within the service or product offering.

Required Technical and Professional Expertise

Security and Compliance Knowledge: Deep understanding of security concepts, attack vectors, and compliance requirements.
Technical Proficiency: Familiarity with security tools, technologies, and processes.
Problem-Solving: Ability to identify and resolve security issues effectively.
Communication and Collaboration: Strong interpersonal skills to interact with various stakeholders.
Process Management: Experience managing and improving processes.
Documentation and Evidence: Ability to document and maintain accurate records.
Risk Assessment: Skill in assessing and mitigating security risks.
Compliance Management: Knowledge of compliance frameworks and standards.
Technical Writing: Ability to write clear and concise technical documentation.

Preferred Technical and Professional Expertise

Familiarity with Apptio and IBM Products and Services
Key Job Details
Role: