---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Engineer
Type: Permanent F/T
Closing Date: 09/18/2004
Working as full-time employee for this Automated Policy software & security
assessment services vendor, security engineers provide a full compliment of
security services for this vendor’s clients in the Financial, Government &
Commercial sectors. Acting in a pre & post sales role, this includes conducting
controlled penetration tests, internal vulnerability assessments and IT
security audits using various standards and methodologies. Professional
services security engineers also assist our client’s customers with the
implementation of their security policy compliance management program using
this software vendor’s policy suite.
Typical functions the hired engineer can expect to lead or participate in
include:
· Security Assessments and Remediation: External & Internal Penetration
Testing and Vulnerability Assessments, Wireless Implementation Assessments &
Vulnerability Remediation. Develop presentations that summarize preliminary
findings of on-site analyses and assessments.
· Regulatory and Standards Compliance Audits: (i.e. Sarbanes Oxley,
CobIT, FISMA, GLBA, HIPAA, BASEL II, FACT, etc.)
· IT Security Policy Services: define, develop & confirm compliance with
regulatory & custom policies, NW Security Baseline, etc.
· Serve as IT security experts for this SW Vendors internal
organizations, as well as prospects and clients.
· Great opportunity to help define newer releases of the software i.e.
developing content for policy templates by researching & analyzing IT security,
privacy and homeland security legislation ensure that new requirements are
included in the product development roadmap and that that requirements are
eventually implemented in new releases assist in the development of new
implementation standards for network components, operating systems, wireless
devices, etc. so these standards can be integrated into the product offering.
· Maintain IT security expertise by reading periodicals, attending IT
security conferences, attending local ISSA chapter meetings, speaking at IT
security-related conferences and tradeshow, developing IT security related
articles for publication, etc.
· Maintain expert proficiency with hacking tools and network
vulnerability assessment tools used in external penetration tests and internal
vulnerability assessments.
· Support up-sell of products by demonstrating how discovered network
vulnerabilities would be avoided with the implementation and use of vendor's
solution.
Typical customer engagements range anywhere from 3 to 10 days.
JOB REQUIREMENTS
---------------------------------------------------
Interested candidates should have commercial experience installing security
software, performing security architecture reviews, security risk analysis,
firewall security installations, advising senior executives of corporations and
institutions on issues of Information Risk Management, Strategic Security
Governance, Policies & Best Practices and Security Technologies & Operations.
Have proven experience interpreting regulations and providing strategic plans
for regulatory compliance.
Excellent written & oral communications skills as well as the ability to
present technical issues & solutions to all levels of client management.
Ability to travel from 50 to 70% nationally. Typical customer engagements range
from 3 to 10 days. Can be based anywhere in the U.S as long as individuals have
access to major airport. CISSP and/or CISM a plus. If not, company will pay for
CISSP certification. 100K Base, Bonus and stock options.
Ideal base locations would be CA, Chicago, NY, CO, TX, but not required.
CONTACT
---------------------------------------------------
Gregg Ruoti
Director Business Development
TransQuest Defense & Security
Bay Area, California, US
greggr@transquest.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers a way to search and manage
job opportunities and resumes which is closely tied
to this mailing list.
http://www.securityfocus.com/jobs
