Associate Security Consultant - Cyber Strategy & Risk 2027

Introduction

IBM Cybersecurity brings together consultants, architects, analysts, engineers, and technical specialists who help organizations strengthen resilience against evolving cyber threats. We are looking for early-career professionals interested in building expertise in areas such as Identity and Access Management (IAM), Cloud Security, Threat Management, Security Operations, Threat Management, Security Operations, Data and Application Security, or Governance, Risk, and Compliance. In this role, you'll work alongside experienced consultants on real client engagements while developing technical, consulting, and problem-solving skills in a collaborative environment.

To give yourself the best opportunity for success, we advise applying only to roles that align with your skills and experience, rather than applying broadly across all entry-level positions. You''ll receive a status update email for each application, so be sure to check your IBM Careers account regularly - it''s the best way to get a centralized view of which roles you have active applications against.

Your role and responsibilities

As an Associate Security Consultant, you will help clients design, implement, and strengthen security solutions that protect applications, users, systems, and data across modern enterprise environments.

You'll work on real client engagements alongside experienced consultants and technical specialists while building practical experience in cybersecurity domains such as cloud security, identity and access management, threat management, security operations, or governance and risk.

Your responsibilities may encompass:

• Collaborate with client teams and IBM professionals to gather business and technical requirements and support the design of effective security solutions
• Contribute to Enterprise-wide Access Management initiatives, including authentication, authorization, identity, and secure access processes
• Participate in multiple phases of client engagements, including requirements analysis, solution design, identity and secure access processes, implementation, testing, and operational support
• Assist with security architecture, application security, cloud security, monitoring, and threa management activities across diverse environments
• Work with modern cybersecurity platforms, automation tools, and AI-enhanced security operations technologies
• Build knowledge across multiple platforms, architectures, security domains, and consulting methodologies.

Required technical and professional expertise

• Familiarity with network architecture, network security principles, authentication and authorization methods, and encryption protocols and standards
• Exposure to one or more cybersecurity domains such as Threat Management, Security Operations, Data and Application Security, Identity &Access Management, Cloud and Infrastructure Security, or Governance, Risk, and Compliance
• Working knowledge of programming or scripting languages such as Python, C/C++, Go/Golang, Bash, or C#, with exposure to software testing, automation frameworks, or secure development practices
• Exposure to security tools and technologies related to vulnerability scanning, monitoring, firewalls, intrusion detection/prevention systems, encryption, or network analysis
• Understanding of cybersecurity operations concepts including SIEM, SOAR, EDR, threat detection, or incident response workflows
• Interest in emerging security technologies, automation, AI-assisted security operations, and modern cloud security practices
• Willingness to travel up to 100%

Preferred technical and professional experience

• Bachelor's degree in a related technical field preferred (Computer Science, Cybersecurity, Data Science, Statistics, Mathematics, MIS, Engineering, or related disciplines)
• Knowledge of network and application security, software engineering, secure application development, mobile technologies, or identity and authentication solutions
• Exposure to enterprise security platforms such as Microsoft Sentinel/Defender, CrowdStrike, Google SecOps, Palo Alto Networks XSIAM, Splunk, or related SIEM, SOAR, and EDR technologies
• Industry certifications or coursework related to cybersecurity, cloud security, or security operations (CompTIA Security+, CISSP, or similar) are a plus.