---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Forensics Engineer
Type: Permanent F/T
Closing Date: 09/11/2004
Ernst & Young's people in more than 140 countries around the globe pursue the
highest levels of integrity, quality and professionalism to provide clients
with solutions based on financial, transactional and risk-management knowledge
in its core services of audit, tax and transaction services. We strive to help
all of our people achieve both their professional and personal goals through an
inclusive environment that values everyone's contributions, appreciates
diversity of thought, fosters growth, and provides continuous opportunities for
development. Recognized by organizations such as Fortune, Working Mother,
Training, and DiversityInc.com, Ernst & Young continually strives to be a great
place to work.
Description:
The Security and Technology Solutions (STS) practice evolved as a key component
of our Technology, Security and Risk Services (TSRS). Our security services
provide the building blocks for a secured and protected business environment.
Employing state-of-the-art technology, experienced teams of Ernst & Young
security professionals deliver enterprise security solutions enabling our
clients to take advantage of the emerging electronic economy in a secure
manner. STS professionals at Ernst & Young have extensive experience with
information security protection, system security planning, information security
assessments and implementation, security program development and strategic
technology planning. These services help companies validate their
infrastructures, design and implement business processes and technology
solutions, address regulations and educate and train management and employees.
We are currently seeking a professional to participate on multiple client
engagement teams and other related activities in Ernst & Young’s
state-of-the-art Advanced Security Center in downtown Houston. This 2,000
square foot facility is dedicated to providing world class attack and
penetration security testing (known as “white hat hacking”) and is
equipped with the latest “toolbox” of applications, custom configured
hardware, and test environments to discover and mitigate clients security
weaknesses before they can be exploited by unauthorized parties. The Center is
equipped and configured to provide maximum collaboration and teaming
opportunities.
JOB REQUIREMENTS
---------------------------------------------------
Responsibilities:
- Perform vulnerability and Attack & Penetration assessments in Internet,
Intranet and Wireless environments
- Perform discovery, and scanning for open ports and services
- Apply appropriate exploits to gain access, and expand access as appropriate
- Participate in activities involving application penetration testing and
application source code review
- Interact with the client as required throughout the engagement
- Produce reports documenting discoveries during the engagement
- Debrief with the client at the conclusion of each engagement
- Participate in research and provide recommendations for continuous
improvement
- Participate in knowledge sharing
Requirements:
To qualify for this position offering excellent opportunities for career
advancement to the right professional, candidates must have:
- Bachelor's or Master's degree in Computer Science, Information Systems,
Engineering or related major
- Experience performing Attack & Penetration, network assessments, incident
response (specifically developing containment measures for infections, virus
detection, identification/eradication procedures and recovery measures)
- Strong Unix, NT, networking and wireless security skills
- Source Code review from a security perspective (Java, C++, C#, asp, asp.net)
- Excellent teaming skills
- Good communication skills
- Demonstrated integrity in a professional environment
- Manual Attack & Penetration testing experience above and beyond running
automated tools is a plus
- Experience developing custom scripts or programs to port scanning and
vulnerability identification is a plus
- Application Development is a plus
- Prior military/government background is a plus
- Ability to travel
- Candidates must also be actively pursuing a CISSP and other related
certifications.
Ernst & Young LLP, an equal opportunity employer, values the diversity of our
work force and the knowledge of our people.
CONTACT
---------------------------------------------------
For consideration, please e-mail your application to: dept.25829@eycareers.com.
No phone calls or agencies, please. Visit our Web site at:
www.ey.com/us/careers.
www.ey.com/security
Ernst & Young LLP
Houston, Texas, US
dept.25829@eycareers.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers a way to search and manage
job opportunities and resumes which is closely tied
to this mailing list.
http://www.securityfocus.com/jobs
