Security Specialist

About the role

IBM's Cloud Platform Security team is seeking a technical professional to strengthen the security posture of IBM Cloud services. You will work in an agile, global environment to design, implement, and maintain security controls that keep customers’ workloads safe and compliant.

Key responsibilities

• Design and harden controls across the Kubernetes/OpenShift ecosystem, ensuring logical and physical isolation.
• Build and operate image scanning, signing, SBOM workflows, and provenance checks within CI/CD pipelines.
• Deploy detection tooling, conduct threat modelling, create playbooks, and provide hands‑on incident response.
• Engineer robust RBAC, IAM, OIDC patterns and manage secrets securely.
• Implement policy‑as‑code, CI/CD guardrails, and support the Secure Development Lifecycle.
• Map controls to CIS Benchmarks, NIST, ISO, SOC 2, PCI and perform audit readiness and validation.

Required profile

• Master’s degree (required).
• Proven experience with platform security in cloud environments.
• Hands‑on expertise with Kubernetes/OpenShift and CI/CD pipelines.
• Familiarity with security compliance frameworks (CIS, NIST, ISO, SOC 2, PCI).

Required skills

• Kubernetes
• OpenShift
• CI/CD pipelines
• Image scanning & signing
• Software Bill of Materials (SBOM)
• Threat modelling
• Incident response
• RBAC / IAM / OIDC
• Secrets management
• Policy‑as‑code
• CIS Benchmarks
• NIST
• ISO
• SOC 2
• PCI