Senior Security Advisor

Kyndryl

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

At Kyndryl, our Customer Technology Advisors (CTAs) and Senior Security Consultants are innovators, constantly pushing boundaries and transforming how our customers conduct business. We seek a talented individual who thrives in a dynamic environment and is prepared to protect organizations from known and unknown threats, becoming a defender of the digital world.

As a CTA and Senior Security Consultant, you will be responsible for ensuring the confidentiality, integrity, and availability of organizational data by assessing, analyzing, and implementing effective security measures. Your primary focus will be on delivering high-value projects, with the additional responsibility of contributing to technical pre-sales activities to ensure comprehensive security solutions from initial consultation to final implementation.

Key Responsibilities

1. High-Value Project Delivery: Lead and manage high-value security projects, working closely with clients to understand their unique security needs and assess their current security posture. Provide expert guidance on best security practices, risk management strategies, and robust security policies.
2. Pre-Sales Support: Collaborate with the sales team to participate in pre-sales activities, including client meetings, presentations, and the development of proposals that address customer security challenges and demonstrate our value proposition.
3. Hands-on Implementation: Design and implement security controls, policies, and procedures. Collaborate with cross-functional teams to deploy advanced technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies.
4. Vulnerability Assessments and Audits: Conduct thorough security assessments to identify potential breaches. Your detailed reports and findings will support management decisions and actions.
5. Continuous Learning and Adaptation: Stay ahead of the latest security threats, technologies, and best practices. Your recommendations will enhance the organization's security posture, keeping it at the forefront of defense.
6. IT Infrastructure and Application Security: Lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring security is integrated from inception.
7. DevSecOps, Cloud Migration, and IT Modernization: Drive the integration of security practices into DevOps processes, facilitate cloud migrations, and contribute to IT modernization efforts to ensure secure, resilient, and scalable solutions.
8. Identity and Access Management (IAM) and Zero Trust: Lead initiatives focused on IAM and Zero Trust architectures, ensuring robust identity verification, access controls, and continuous monitoring to protect against unauthorized access and threats.
9. Collaborative Impact: Work with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge will shape secure collaborations and partnerships.
10. Incident Response and Forensics: Develop and lead incident response plans, conduct forensic investigations, and manage security incidents to minimize impact and improve organizational resilience.
11. Threat Intelligence and Proactive Threat Hunting: Implement and manage threat intelligence programs, conduct proactive threat hunting activities, and stay ahead of emerging threats in the cybersecurity landscape.

As a CTA and Senior Security Consultant at Kyndryl, you will join the Kyndryl Consultant Profession, collaborating with other consultants, architects, project managers, and technical experts. This role offers unlimited opportunities and unmatched support through our commitment to your learning, training, and career growth.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills and Experience

1. Minimum of 7+ years of experience in information security consulting and implementation.
2. Strong understanding of security principles, practices, and technologies.
3. Experience managing risks related to information processing, storage, or transmission.
4. Experience conducting security and risk assessments using frameworks like NIST, RMF, ISO, and ANSSI Guides.
5. Excellent communication skills for conveying complex security concepts to technical and non-technical audiences.
6. Ability to adapt to changing security threats and stay updated with the latest security trends and best practices.
7. Proven ability to work autonomously and collaboratively in a team environment.
8. Demonstrated capability to continuously learn and apply new knowledge in a rapidly evolving field.
9. Proficiency with common security tools and platforms (e.g., SIEM, EDR, SOAR).
10. Knowledge of relevant regulations such as GDPR, HIPAA, PCI DSS, and industry-specific requirements.

Expertise

1. Expertise in multiple security domains such as Governance, Risk, and Compliance (GRC) and Identity and Access Management (IAM).
2. Network Security and Security Operations Centers (SOC).
3. Cloud Security and Incident Management.
4. DevSecOps and IT Modernization.
5. Experience with threat intelligence platforms and proactive threat hunting techniques.
6. Proficiency in incident response methodologies and digital forensics.
7. Proven experience in leading and delivering successful security projects.
8. Demonstrated ability to design and implement security controls, policies, and procedures.
9. Experience with deploying advanced security technologies and conducting thorough security assessments.
10. Experience in quantifying risks and developing mitigation and remediation strategies.
11. Accreditation to work with government authorities or regulated industries, with an opportunity to pass ANSSI Accreditation.

Desired Certifications

1. Certified Information Systems Security Professional (CISSP)
2. Certified Ethical Hacker (CEH)
3. Certified Information Security Manager (CISM)
4. Offensive Security Certified Professional (OSCP)
5. GIAC Security Essentials (GSEC)

Join Kyndryl and be a part of a team that is redefining how businesses implement secure solutions. Apply now to be at the forefront of cybersecurity innovation.

Diversity

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handedly: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more.