---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Application Security Engineer
Location: SF Bay Area, California, United States
Type: Permanent F/T
Closing Date: 2005-12-18
Web Application Security Consultant – Western Region
Essential Duties and Responsibilities:
• Conduct comprehensive security assessments (penetration testing and/or
code reviews) of complex NTier web applications
• Assist clients in developing best practices for secure web application
development
• Provide web application security training to small groups of
application developers, QA testers, and InfoSec engineers.
• Use your proven communication skills to prepare written reports at the
engineering, manager and executive level
• Showcase your organization, coordination and engagement planning skills
to ensure that products/deliverables meet contract/work plan
• Put your analytical mind to use assessing clients online commerce
readiness and provide appropriate security assistance
• Empathize with client engagement’s as it relates to clients
business
• Know how to recognize and communicate opportunities to further assist
clients with any additional security needs
• Understand and develop a positive team attitude
• Some travel require
JOB REQUIREMENTS
---------------------------------------------------
Knowledge, Skills and Abilities:
• Understanding of operating system and application security
configuration and best practices in NT/Windows and UNIX environment
• Cursory experience in WhiteBox/BlackBox Application Penetration Testing
• Knowledge of available Information Security resources, common security
issues, risks and means of alleviating them
• Exposure to .NET or Java Code Auditing
• Ability to understand NTier web architecture as it relates to security
• Knowledge of multiple languages (VBScript, Jscript, C#, ASP.NET, Java,
C/C++)
• Cursory knowledge of configuration and administration of MSSQL and
Oracle
• Cursory understanding of HTTP protocol
• Cursory understanding of SSL and related encryption technologies
• Demonstrate knowledge in some areas of industry or functional specialty
Required Skills:
• True Passion for breaking complex software systems
• VBScript, Jscript, C#, ASP.NET, Java, JSP, or Servlets
• Understanding of .NET or Java
• OO Development/design
• Web technologies (HTTP, HTML, Java Script, etc)
• Database skills, such as MSSQL or Oracle
• Experience with *nix and Windows Operating Systems
• Understanding of security concerns in software development
• Basic understanding of crypto/secure protocols
• Understanding of security technologies and awareness of common
vulnerabilities
• Excellent written and verbal communication skills
• Excellent customer and team skills
• Excellent Interpersonal skills
• Willingness to work in small company atmosphere
• Willing to do small group training a plus
CONTACT
---------------------------------------------------
Please send your resume and contact details to careers@appsecconsulting.com or
call our office at (408) 730-2655.
AppSec Consulting, Inc.
Brian Bertacini
Sr. Manager
bbertacini@appsecconsulting.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
