X-Force Associate Hacker 2027

In this role you will join IBM Consulting via our world class Associate Program for university hires. As an Associate at IBM Consulting you will have the opportunity to work with a diverse range of clients worldwide. Our clients' technical and business needs are constantly evolving. We're hiring inspired, talented individuals, who believe no problem is too big to solve. We focus on your professional development through ongoing learning, mentorship, development of technical skills, and continuous personal growth, all grounded in a culture of coaching and career advancement. If you see yourself as someone who never stops learning and who wants to unleash your potential, the IBM Consulting Associates Program is for you. About X-Force: Now, let’s talk about why we are here: X-Force! The team is comprised of hackers, responders, researchers and analysts, many of whom are world-renowned security thought leaders. We are looking for Associate Hackers to join our Penetration testing team. Are you passionate about breaking into applications, networks, systems, databases, devices and other technologies to uncover security vulnerabilities and help fix them? Are you interested in joining a team of like-minded passionate experts, many of whom have decades of experience breaking into anything and everything to help organizations strengthen their security? If so, IBM Consulting’s team of veteran hackers is looking for a hacker, and you may be the perfect fit. Our clients' technical and business needs are constantly evolving. We’re hiring inspired, talented individuals eager to apply their knowledge and perspective to challenging work that evolves industries and our world. We prioritize ongoing learning, development of technical skills, and continuous personal growth, all grounded in a culture of coaching and apprenticeship. To give yourself the best opportunity for success,we advise applying only to roles that align with your skills and experience, rather than applying broadly across all entry-level positions. You'll receive a status update email for each application, so be sure to check your IBM Careers account regularly — it's the best way to get a centralized view of which roles you have active applications against. Put your technical skills in the spotlight securing our clients’ most important assets. As an Associate Hacker, you’ll engage with clients to effectively secure their applications and infrastructure through penetration testing. You will gain in-depth of knowledge and experience understanding a client’s environment, running tests against these environments, and escalating or gaining access to system by leveraging weak controls. You must be able to rapidly learn new technologies and processes with minimal assistance. Travel depends on project requirements. Work you could do as an Associate Hacker: Perform documentation, vetting and weaponization of identified vulnerabilities through reverse engineering. Prepare and present technical reports and briefings to Technical and Executive teams. Conduct penetration tests against clients including identifying exploitable misconfigurations, weak credentials, unpatched systems, and attack chains and testing for logic flaws, injection vulnerabilities, authentication weaknesses, and access control failures. Provide subject matter expertise in the form of research, tooling, and consulting engagements. Gain knowledge across multiple platforms, processes, or architectures. Outcome focused, possessing a high level of resilience, you demonstrate the flexibility and resolve needed to achieve success across a broad range of consultative contexts Effective communication and presentation skills The ability to lead large groups and be a primary facilitator Drive to do research, publications, blogs, presentations, etc. Ability to lead and shape client expectations Ability to self-start, and work independently on project In-depth understanding of network design, network security, authentication, authorization techniques, and encryption protocols and standards In-depth understanding of network security tools for vulnerability scanning, network monitoring, network sniffing, routers, firewalls, Intrusion detection and protection, anomaly detection and encryption standards Programming experience in one or more of the following: Java, .Net, Python, or Ruby History of published research, blog posts, or a history of presenting at local or regional security conferences. Knowledge or experience in one or more of the following Security Domains: Network Penetration Testing, Application Penetration Testing, Red Teaming, Social Engineering, Vulnerability Scanning