---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Engineer
Location: Boston, Massachusetts, United States
Type: Permanent F/T
Closing Date: 2005-09-17
Senior Security Architect
-------------------------
Job Description:
----------------
We are seeking an experienced Senior Security Architect who will be able to
lead and conduct a wide variety of consulting engagements ranging from the
deployment and configuration of enterprise security systems to business and
technology-based architecture reviews and security assessments of client
operations and technologies. This candidate will be a key contributor in a
focused group of security consultants to deliver high-value, high-quality
engagements to mid market and enterprise clients.
The ideal candidate will be able to demonstrate capability to and experience
with architecting networks and information security systems, assessing a
complete range of risks and controls, and development of policies and
procedures; all in regulated and un-regulated industry environments. The
ability to work independently in challenging environments; to self manage
projects to tight deadlines and changing customer requirements, and to work as
part of a cross-practice team is mandatory. The successful applicant will
primarily be responsible for delivering and managing our larger information
security projects for our clients in the healthcare, financial, insurance and
public sector verticals. The position reports to the Director of Operations.
JOB REQUIREMENTS
---------------------------------------------------
Job Requirements:
---------------------
Successful candidates will:
 Demonstrate an understanding of comprehensive security programs,
including technologies and tools, architectures and network and application
design, policies and procedures, and the business aspects of risk.
 Demonstrate mastery of industry-standard security frameworks and
approaches.
 Be able to construct and assess high-level and detailed security
designs translating business needs and regulatory requirements into cost
effective and appropriate risk controls.
 Be able to leverage experience and technical knowledge to provide
useful and reasonable recommendations to our clients.
 Understand the application of risk assessment and security management
methodologies.
 Have an understanding of data center and enterprise management
technologies. Technical knowledge and ability to implement and configure
various control devices including Firewalls, DNS, network-based IDS/IPS,
content filtering, host-based security controls and vulnerability assessment
tools.
 Support pre-sales efforts and provide subject matter expertise in
developing our approach to solving customer opportunities.
Required Technical Certifications:
 CISSP certification
 BA or BS Degree
 SANS/GIAC, CISM, or CISA certification
Optional Technical Certifications:
 BSEE/CS, MSEE/CS or equivalent
 Cisco: CCNA, CCSP, CCIE
 Check Point: CCSA, CCSE, CCSE+, CCSI
 Symantec: SCSP (any category)
Technical Skills:
 TCP/IP Networking (design, implementation, and troubleshooting in
complex environments)
 DNS knowledge, including architecture in Windows, AD, BIND, and DBJDNS
environments
 Routing protocols and configurations
 VLAN 802.1Q configurations
 OS: Linux, Windows, two or more enterprise Unix (AIX, Solaris, etc)
Information Security Skills & Experience:
 5 - 10 years of direct experience in an information security role
(consultant or administrator)
 Extensive knowledge of information security management best practices
 Development of InfoSec Policy and procedures
 Perimeter and internal system hardening
 Penetration Testing & Vulnerability Assessment
 Security auditing and management
 Authentication & Access Control Mechanisms (including two factor
authentication)
 VPN and extranet architecture and operations
 LDAP, PKI & certificate architecture and design
 Wireless security, especially WEP/WPA, EAP variations, and IPsec /
VPNs over wireless
 ISO 17799, HIPAA, GLB, Sarbanes Oxley and/or other regulatory
requirements/certifications
 Expertise with following tools and technologies (at least one in each
category):
o Firewalls: Checkpoint, Cisco PIX, NetScreen, Symantec
o Routers/Switches: Cisco IOS, Enterasys
o IDS/IPS: Snort/Sourcefire, Cisco Security Agent, Netscreen
o Content Filtering: SurfControl
Additional:
 Outstanding written and verbal communication skills
 Organizational and self-management skills are mandatory
 Fluent in use of Microsoft Office tools (e.g., Word)
 Training, teaching, presentation experience & track record a plus
CONTACT
---------------------------------------------------
Please submit an electronic copy of your resume for consideration to us via
email.
FireTower
Chris Doggett
chris.doggett@firetower.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
