---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Analyst
Location: Boston, Massachusetts, United States
Type: Contract
Closing Date: 2006-02-25
Client: National Healthcare Provider
Position: Security Test Analyst
Terms: Consult-to-Hire. Preliminary 3 month contract.
Overview:
The Security Test Analyst is responsible for application and systems security
testing of BCBSMA applications to ensure best practice coding and security
standards are being followed. As a member of the ETS Automation Team, the
Security Test Analyst will determine the need for security testing (based on
application risk assessments), execute the security testing (using a
combination of manual and automated techniques), analyze and report the results
of the security testing, and work with the project team to resolve all security
related issues and vulnerabilities.
Key Accountabilities:
· Enforce current security and privacy compliance standards in
all BCBSMA application releases, including HIPAA and OWASP
· Incorporate new security/intrusion testing methodologies as
required to keep up to date with current security standards and new security
tools
· Improve the quality and quantity of security/intrusion testing,
increase test automation and test coverage
· Assist Project Managers and ETS Leads in security risk
identification, security risk management, and security risk mitigation to
ensure that successful delivery of tested applications to the production
environment is realized.
JOB REQUIREMENTS
---------------------------------------------------
Qualifications (knowledge/skills/abilities/behaviors):
· Strong knowledge of QA (testing) methodologies with hands-on
testing experience.
· Strong technical skills and knowledge of programming concepts
and best practices in languages such as Java, ASP, .NET, XML, and SQL. Some
programming experience preferred.
· Must have a deep understanding of application security
vulnerabilities in order to use automated tools and be able to distinguish
between false positive results, and true vulnerabilities
· High aptitude for learning new tools and skills quickly.
· Knowledge in general health care, BCBSMA core systems,
e-Commerce web design and development, client server and data warehouse
environments and concepts.
· Good written and oral communication with the ability to work in
a collaborative environment
Education/Relevant Experience:
· MS or BS with equivalent work experience
· 3 - 5 years experience working with a quality assurance or
system life cycle methodology
· 3+ years relevant business experience
· 1 - 2 years programming experience
· Ethical hacking experience a major plus
CONTACT
---------------------------------------------------
The Systems Group
Justin Kong
securityjobs@thesystemsgroup.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
