---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Jr. Security Analyst
Location: South Brunswick, New Jersey, United States
Type: Permanent F/T
Closing Date: 2005-12-22
Doesn't have to have it all, or be deep in a lot of it. Director needs someone
that can be his primary pen tester - run Nessus, review results, write up a
decent report. Programming/scripting it a big plus. Formal specs follow:
Position requires an individual with experience related to testing and
validating exploitable conditions on devices such as web servers, mail servers,
routers, firewalls, intrusion detection systems, etc. The individual must be
able to document accurate findings and present detailed remediation
requirements to management. Additionally, candidate will be responsible for
effectively managing internal and external information security alerts,
remediation plans, and other risk mitigation projects. Experience is required
in application and network testing and running both automated and manual
vulnerability assessments. Experience in .NET and ASP is highly desirable as is
application programming experience (JavaScript, Shell Script, Perl, Python, C,
C++, CGI, PHP, etc.).
CISSP is required – CISA, CEH, SANS, UNIX certifications preferred.
In-depth background check required
JOB REQUIREMENTS
---------------------------------------------------
• Significant experience performing vulnerability testing (internal /
external)
• Must have found vulnerabilities in previous assessments
• Evaluating fixes (patches) of vulnerabilities and malicious code (e.g.,
viruses)
• Comprehensive understanding or advanced routing, firewall and intrusion
detection methodologies
• Proficient in risk assessment/mediation methodologies
• Strong operating systems experience (Windows, Linux, Solaris, etc.)
• Ability to demonstrate exploitation using SQL Injection, Cross-site
Scripting, Buffer Overflows, Parameter Tampering, Hidden Field Manipulation,
Cookie Poisoning, SOAP and WebServices Manipulation, etc
Technical Skills:
Candidates should have significant expertise in one or more security areas, and
should have demonstrated outstanding project management experience in a
leadership role.
• Knowledge of ethical hacking and penetration testing techniques
including the following:
- Penetration Testing / Ethical Hacking tools and forms of attack (SQL
Injection, Cross-site Scripting, Buffer Overflows, Session Hijacking, Hidden
Field Manipulation, Cookie Poisoning, SOAP) and associated tools (eEye, Qualys,
NMap, SQueaL, Foundstone, DShield, Nessus, etc.)
- Hacker exploit scripts/programs to test whether vendor/developer patches
operate as intended and fix the identified vulnerability or identify the
malicious code.
• Intrusion Detection Environments and forms of attack with the ability to
perform analysis of the systems and application logs for signs of attacks and
intrusions
• Network Traffic Monitoring Tools
• Network Protocols (TCP/IP, NetBIOS / Netbeui, IPX, OSI) and associated
technologies (DNS, FTP, HTTP)
• Network Topologies
• Operating Systems: Microsoft Environments, Linux, UNIX, AIX
• Knowledge of security and encryption mechanisms
• Application Servers (Websphere, Weblogic)
• Web Servers
• Network Security (VPN, SSL, Smart Cards, Biometrics)
• Cryptographic tools, methods, systems and protocols
• Exceptional interpersonal communication and presentation skills is a
must
• Strong written and verbal communications skills required.
CONTACT
---------------------------------------------------
Please email your resume to security@infonet.bz
Infonet Resources, LLC is a retained executive search firm that has earned a
reputation for excellence in securing leadership and intellectual capital.
This positione reports to a Director of InfoSec we recently recruited and
placed with our outstanding client.
Fortune 500
tim mcintyre
managing director
tim@infonet.bz
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
