Application Security DevSecOps - SCA

As a Cybersecurity Specialist at Kyndryl, you will be at the forefront of protecting our customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. Your responsibilities will include: - Using a variety of tools and techniques to defend against cyber threats such as malware, ransomware, phishing attacks, and data breaches. - Implementing new cybersecurity systems and policies to ensure the protection of customer data and assets. - Monitoring and reviewing potential threats from various cybersecurity systems, conducting proof-of-concepts (POCs) with new cybersecurity software, and evaluating their effectiveness for integration into the organization's systems. - Providing automation scripts for threat hunting in customer environments and sharing lessons learned from cyber-attacks. - Conducting penetration testing, threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches, and identifying intrusions. - Researching and evaluating cybersecurity threats, performing root cause analysis, and assisting in the creation and implementation of security solutions. - Working on security innovation by creating and experimenting with outside-the-box ideas that could change the trajectory of cybersecurity. In addition to these responsibilities, you will have the opportunity to work with cutting-edge technology, be part of a dynamic team, and make a significant impact in the world of cybersecurity. Qualifications Required: - 3 years of experience in a Cybersecurity field. - Expertise in network routing, switching, troubleshooting, engineering, infrastructure load balancing, and virtual private networks. - Configuration and management of SCA scans in Prisma Cloud and Fortify. - Integration of SCA scans in CI/CD pipelines. - Reviewing results for open-source dependency risks and third-party libraries. - Supporting developers with remediation recommendations. - Monitoring scan success and SCA features availability. - Reporting metrics, driving compliance mapping, tracking remediation SLA compliance, and findings for closure. - Alerting and escalating on SLA compliance failures. Preferred Skills and Experience: - Proficiency in cloud computing and security architecture, hybrid and multi-cloud computing, various cloud-based systems, and services. - Familiarity with vulnerability scanning, application security, penetration testing, encryption, threat modeling, identity and access management, and secure coding. - Good knowledge of cyber security incident response, security operations, vulnerability management, IT security architecture, risk management, cyber threat hunting, and cyber security standards. - Familiarity with DevSecOps practices and methodologies, and experience in integrating security into agile development processes. - Familiarity with emerging security technologies and trends such as artificial intelligence, machine learning in security, zero-trust architecture, or secure remote access solutions. Kyndryl values diversity and inclusivity, welcoming people of all cultures, backgrounds, and experiences. Through Kyndryl Inclusion Networks, we create a workplace where everyone can find and provide support and advice, fostering an equitable culture where individuals can bring their whole selves to work. You can expect to work with state-of-the-art resources and Fortune 100 clients, providing opportunities to innovate, build new capabilities, relationships, processes, and value. Kyndryl prioritizes employee well-being by offering benefits that support you and your family through life's important moments. Additionally, our employee learning programs provide access to industry-leading certifications to help you succeed and grow in your career. As a Cybersecurity Specialist at Kyndryl, you will be at the forefront of protecting our customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. Your responsibilities will include: - Using a variety of tools and techniques to defend against cyber threats such as malware, ransomware, phishing attacks, and data breaches. - Implementing new cybersecurity systems and policies to ensure the protection of customer data and assets. - Monitoring and reviewing potential threats from various cybersecurity systems, conducting proof-of-concepts (POCs) with new cybersecurity software, and evaluating their effectiveness for integration into the organization's systems. - Providing automation scripts for threat hunting in customer environments and sharing lessons learned from cyber-attacks. - Conducting penetration testing, threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches, and identifying intrusions. - Researching and evaluating cybersecurity threats, performing root cause analysis, and assisting in the creation and impleme