IntroductionSoftware Developers at IBM are the backbone of our strategic initiatives to design, code, test, and provide industry-leading solutions that make the world run today - planes and trains take off on time, bank transactions complete in the blink of an eye and the world remains safe because of the work our software developers do. Whether you are working on projects internally or for a client, software development is critical to the success of IBM and our clients worldwide. At IBM, you will use the latest software development tools, techniques and approaches and work with leading minds in the industry to build solutions you can be proud of.
Your Role and ResponsibilitiesIBM is searching for motivated Security Software Engineer who designs, implements and tests software, with specific focus on security tooling and solution aimed to enforce security, to enable and keep compliance on Cloud. Security tools include but are not limited to vulnerability management tools, compliance automation tools, access management tools, etc. The Security Software Engineer identifies and prototypes security architectures and technical solutions in order to support, enable and improve all the Security Functions (Identify, Protect, Detect, Respond, Recover, Compliance).We are looking for someone who collaboratively contributes to design discussions and decisions, performs code and design reviews with other team members, produces documentation for the work done, and iterates to pursue solution improvements. A Security Software Engineer also supports security tools’ adopters in order to investigate, troubleshoot and address issues.The Security Software Engineer is able to work in an environment where agile is adopted as development process across different geos and cross organization.Required Technical and Professional Expertise- Bachelor's in technical discipline, Computer Science (or relevant)
- 5+ years experience in software development
- 2+ years experience in services integration on cloud
- Extended knowledge and practice of Cyber Security principles
- Extended experience on languages like Python and at least one among GO, Ruby, Java, and NodeJS; extended experience on scripting
- Extended knowledge and practice on Kubernetes, CI/CD tools (Travis, Jenkins, Tekton),git/github
- Knowledge and practice on Openshift (ROKS)
- Extended experience on agile methodology
Preferred Technical and Professional Expertise- Knowledge and practice on security and compliance (Security Engineering, Cryptography, TLS/SSL, FIPS, NIST security framework)
- Experience with operations of data centers or Cloud, and network security, including security systems such as firewalls, intrusion detection, vulnerability scanning, OS patching, healthchecking
- Experience with container based architectures and implementations such as Kubernetes, docker, etc.
- Knowledge and practice on Kubernetes Operators