---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: CHECK Team Leader
Location: London, , United Kingdom
Type: Permanent F/T
Closing Date: 2006-04-15
Department:
This role will see the successful candidate place within the Security Testing
team playing a major part in the sales, delivery and management of security
penetration tests across all industry sectors and CHECK IT health checks.
The Role/Goal/Mission:
Maintain good relationships with previous and existing clients by ensuring that
level of service exceeds expectations.
Acquire new skills, new ideas and where possible new clients, always striving
to keep a leading edge for both approach and delivery of projects.
Perform accurate pieces of work to the highest quality maintaining
differentiators between what we do and other companies.
Maintain CHECK Team Leader status and assist in the development of CHECK
services, project managing and delivering CHECK assignments.
Reporting to/Line Management:
Security Testing Team Leader
Key Tasks:
• Plan, control and deliver security testing assignments for clients
• Be able to talk about various types of security test, pros and cons and
understand and interpret client requirements
• Write proposals to clients for security testing engagement, including
accurately assessing the required resources
• Take responsibility for the maintenance of CHECK status of the
individual and consequently the company
• Project manage and undertake security testing work, including CHECK
healthchecks, vulnerability scans, application security tests, black/white box
tests, war dialling – including on-site client liaison and managing client
expectations
• Interpret technical test outputs, scan results and findings for various
audiences and into the business impacts and organisation issues that they
reflect
• Write professional test reports to a high quality in terms of content,
style and presentation – particularly in view of the target audience for a
specific piece of work
• Provide quality assurance and direction to the work of others,
including more junior staff
• Support the overall sales processes, including contribution to
larger/multi-discipline bids and tender responses and presentations internally
and to clients.
• Supporting the Security Testing team leader as required.
• Use skills and experience effectively to enhance service delivery and
contribute to knowledge bases and to evolve and develop the testing standards,
approaches and methodologies used.
• Produce/write articles/whitepapers and other research
material/marketing information.
JOB REQUIREMENTS
---------------------------------------------------
Education:
• CHECK Team Leader status (current) highly preferable
• Recognised security professional qualification (e.g. CISSP, GIAC, CISA,
ISEB CISMP) preferable
• Vendor/Platform training/certifications preferable
• At least BSc/BA preferable
• CLAS knowledge desirable
Knowledge/Skills/Experience/Languages:
Several years hands-on penetration testing, network assessment and IT Health
Checks.
Ability to demonstrate experience in Project Managing client engagements from
start-up meetings (including scoping exercise), proposal writing, project
planning and management, participation in testing work of several types and at
all levels through to creation, quality management and presentation of
deliverable report.
Manual penetration testing processes beyond using automated tools.
Experience of the public and financial sectors.
Technical/testing skills including:
• A thorough understanding of TCP/IP suite of protocols.
• Cisco IOS and the range of Cisco routers, switches and firewalls.
• Other vendors (Enterasys, Juniper, Bay/Nortel network devices)
• Familiarity with security configuration of major vendors security
products including Checkpoint, Enterasys, ISS, Cyberguard, Cisco, Siteminder,
ISA Server, RSA etc.)
• Knowledge of operating system security (UNIX – various flavours,
Microsoft)
• Database security (Oracle, SQL Server, DB2)
• Security-focused code review skills (Java, C++, Perl, ASP/.NET, PHP and
C++)
• Familiarity and understanding of Government/HMG policy and standards
• Knowledge of Manual V and Manual T requirements and testing processes
desirable
Also:
• Broad IT and programming experience
• Good understanding of information security management and information
systems governance.
• Relationship between security testing and audit and other
review/compliance requirements
• Considered a plus:
• Knowledge of Voice over IP (VoIP) Security (Knowledge of SIP and
gateway protection)
• Knowledge of Wireless Security testing (GPRS, Bluetooth, 802.11
standards, WPA, WEP)
CONTACT
---------------------------------------------------
Contact name: Henrik Steenholdt
Contact email: henrik.steenholdt@pytec.co.uk
Contact tel: +44 (0) 1604 60 40 80
Pytec
Henrik Steenholdt
henrik.steenholdt@pytec.co.uk
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
