> Markdown version of [/jobs/ext/1966507-it-security-consultant](https://www.wearedevelopers.com/jobs/ext/1966507-it-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Consultant

- **Company:** IBM Deutschland GmbH
- **Location:** Munchen, Germany
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing, Cloud Computing Security, Cyber Security, PCI Data Security Standards, SAP Security, Cloud Platform System, Software Security, Devsecops, Vulnerability Analysis
- **Published:** August 7, 2026
- **Apply:** https://www.itrheinland.de/jobs/303600/junior-it-security-consultant-m-slash-w-slash-d-sap-security-in-koeln#apply_form

## About the Role

Bachelor's Degree
Preferred education
Bachelor's Degree
Required technical and professional expertise

 * Exposure to Application Security: Familiarity with security principles and knowledge of Application Security technologies, including threat models and DevSecOps concepts.

 * Understanding of Security Assessments: Experience working with assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities.

 * Incident Response Knowledge: Exposure to analyzing and resolving security incidents, including developing incident response plans and remediation recommendations.

 * Security Strategy Development: Experience applying security principles to define business drivers and develop associated security strategies and programs.

 * DevSecOps Concepts: Familiarity with DevSecOps best practices and concepts to support clients in achieving a superior security posture.
Preferred technical and professional experience

 * Familiarity with Cloud Security: Exposure to cloud-based application security technologies and threat models is beneficial for providing consulting services to clients with cloud-based infrastructure.

 * Knowledge of Compliance Regulations: Understanding of industry-specific compliance regulations and standards, such as HIPAA or PCI-DSS, can be helpful in developing security strategies and programs for clients.

 * Experience with Security Tools: Exposure to various security tools and technologies, such as vulnerability scanners and penetration testing tools, can be advantageous in analyzing and resolving security incidents.
hybrid, Consulting, Professional, Englisch, Softwareentwicklung, Softwareentwickler, Softwaretest, Servicemanagement, Service-management, Qualitätsmanagement, ITrheinland.de, Empfehlungsbund

## Description

As a Security Consultant specializing in Application Security, you will help clients understand and address application security issues, risks, and vulnerabilities through assessments, workshops, and interviews. You will provide consulting services to analyze and resolve security incidents, ultimately supporting clients in achieving a superior security posture. Your primary responsibilities will include:

 * Analyze Security Issues: Conduct assessments, workshops, and interviews to identify application security issues, risks, and vulnerabilities, and provide recommendations for improvement.

 * Develop Security Strategies: Apply security principles and knowledge of Application Security technologies, Threat models, and DevSecOps concepts to define business drivers and develop associated security strategies, programs, and incident response plans.

 * Resolve Security Incidents: Provide consulting services to analyze and resolve security incidents, working closely with clients to implement effective remediation plans and roadmaps.

 * Collaborate with Clients: Work with clients to understand their security needs and provide tailored consulting services to support their overall security posture.

 * Deliver Security Solutions: Implement security solutions and provide guidance on best practices to ensure clients achieve a superior security posture.
Required education


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)