ApplSec DevSecOps - SCA

This job is with Kyndryl, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

Are you passionate about protecting companies from cyber threats? Do you want to be part of a team that safeguards the digital assets of cutting-edge organizations? Look no further - Kyndryl is seeking a Cybersecurity Specialist to join our team of talented Technical Specialists.

As a Cybersecurity Specialist, you will be at the forefront of protecting Kyndryl's customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. You will use a variety of tools and techniques to defend against a wide range of cyber threats, such as malware, ransomware, phishing attacks, and data breaches.

But that's not all - at Kyndryl, you will also have the opportunity to implement new cybersecurity systems and policies to ensure the protection of our customers' data and assets. You will monitor and review potential threats from various cybersecurity systems and conduct proof-of-concepts (POCs) with new cyber security software to evaluate its effectiveness and potential integration into the organization's systems.

Not only will you be responsible for ensuring the security of Kyndryl's customers' network and systems, but you will also enrich the organization's knowledge towards potential cyber threats and best practices. You will provide automation scripts for threat hunting in customer environments using lessons learned from Cyber-attacks.

You will also have the opportunity to conduct penetration testing and threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches and identifying intrusions. You will research and evaluate cybersecurity threats and perform root cause analysis, all while assisting in the creation and implementation of security solutions.

Additionally, you will have the opportunity to work in the area of security innovation, creating and experimenting with "outside the box" ideas that could change the trajectory of cyber security.

This is a unique opportunity to work with cutting-edge technology, be part of a dynamic team, and make a significant impact in the world of cybersecurity. If you're up for the challenge, apply now to join Kyndryl's cybersecurity team!

Your Future at Kyndryl

Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.

Who You Are

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

Required Skills and Experience

3+ years of experience in a Cybersecurity field

• Expertise in network routing and switching, network troubleshooting, engineering and infrastructure, load balancing, and virtual private networks

Configure and manage SCA scans in Prisma Cloud and Fortify

Integrate SCA scans in CI / CD pipelines

Review results for open-source dependency risks and third-party libraries

Triaging of license, CVE, and transitive dependency issues

Support developers with remediation recommendations

Monitor scan success and SCA features availability

Report metrics and drive compliance mapping (e.g., SBOM, OSS policies)

Track remediation SLA compliance and track findings for closure

Alert and escalate on SLA compliance failures

Preferred Skills and Experience

Proficiency in cloud computing and security architecture, hybrid and multi-cloud computing, and various cloud-based systems and services

Familiar with vulnerability scanning, application security, penetration testing, encryption, threat modeling, identity and access management, and secure coding

Good knowledge of cyber security, incident response, security operations, vulnerability management, IT security architecture, risk management, cyber threat hunting, and cyber security standards

Familiarity with DevSecOps practices and methodologies, and experience integrating security into agile development processes

Familiarity with emerging security technologies and trends, such as artificial intelligence / machine learning in security, zero trust architecture, or secure remote access solutions

Tools used-

Microfocus Fortify SAST, Webinspect, DevSecOps - Jenkins, Jfrog, Github, Qualys, Burpsuite SOAP, Postman, Container Security - Prisma Cloud, CSPM - Prisma Cloud, Kali Linux, Open Source Mobile and Web App Pentetrating Testing Tools

Being You

Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily : Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee

learning programs

give you access to the best learning in the industry to receive certifications,

including Microsoft,

Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.

At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!

If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.