---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Engineer
Location: Annapolis, Maryland, US
Type: Permanent F/T
Closing Date: 02/25/2005
Penetration Test Engineer
(Internal Title: Penetration Tester - Billet #1)
Project Description
A team is being assembled to design, build, and test the Limited Remote Desktop
Guard (LRDG). The LRDG consists of an ultra-thin remote desktop client a
server-side application built on top of Microsoft’s Terminal Services and
a trusted interface to proxy all communications between the client and server.
The project will enable remote desktop access to a variety of applications, and
will support remote access to audio and video devices.
Position Description
This team member will be a main contributor in the security assurance of the
LRDG product. This is a hands-on penetration testing and software validation
role on both Windows and UNIX platforms.
The ideal candidate would have 3-5 years experience in penetration testing and
evaluating products produced by a software development team. The candidate
should have experience in finding security flaws in a application and within a
protocol. The client should also have experience in producing code to exploit
flaws in applications and protocols. The candidate should have experience in
using commercial penetration testing tools such as Retina and ISS. The
candidate would produce test plans, including detailed procedures which can be
followed by any Security Engineer or developer. This position will require
some level of shell scripting and coding, in order to produce some security
tests of the product.
The candidate will be expected to communicate with the developers to security
flaws are properly fixed.
JOB REQUIREMENTS
---------------------------------------------------
Minimum Qualifications
· 2-5 years of related technical penetration testing experience
· Strong knowledge, and administrative experience, on Windows and
UNIX Platforms.
· Familiarity with C/C++ and Java-Based applications.
· Advanced level experience using a penetration testing tools.
· Advanced level experience in finding and creating exploits.
· Experience with MS Word and MS Excel.
· Strong communications skills.
DESIRED QUALIFICATIONS
· Experience with military or intelligence community
environments, specifically with cross-domain solutions, security
accreditations, and related policies
· Strong administrative Windows & UNIX skills.
· Experience with creating public security findings.
· Experience using and administrating soft ICE and other memory
debugging tools.
Minimum Clearance Requirements
Please contact Recruiter
CONTACT
---------------------------------------------------
Jennifer Drury
Recruiting Manager
Windermere
jdrury@witsusa.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
