---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: CHECK Team Leader
Location: London, , United Kingdom
Type: Permanent F/T
Closing Date: 2006-07-14
In this role, reporting to the Manager of Threat Management and working as the
Technical Lead for Penetration Testing, the key responsibilities are to lead
and conduct internal and second-party (due diligence) application and
infrastructure penetration testing.
Additionally, the role will involve participation in the Group CSIRT (Computer
Security Incident Response Team), dealing with fraudulent and hostile
third-party web-sites, intrusion attempts, malicious code and other incidents.
The job will involve participation in a 24x7 support rota, and regular UK and
occasional foreign travel.
This role would suit an experienced penetration tester, looking to broaden
their financial sector experience.
TASKS (key tasks include, but are not limited to):
• Providing input into contract definition and feedback to penetration
test suppliers.
• Providing input to regular due diligence on supplier performance and
providing continued feedback and ensuring quality.
• Building relationships, identifying who is important, where individuals
lie within the organisation and other potential networking opportunities.
• Lead penetration testing engagements. This includes identifying
resource and skill requirements, providing liaison with the business, and
directing and reviewing work.
• Provide leadership, support and feedback to local and divisional teams.
• Subject matter expert and thought leader in all aspects of penetration
testing across all areas of the organisation.
• Provide specialist Information Security input to new systems and ad-hoc
requests from a threat management perspective.
• Liaise with external regulatory and law enforcement agencies officially
representing the company’s interests and providing a Specialist Point of
Contact.
• Participate in the, 24x7 rota based, CSIRT (Computer Security Incident
Response Team), dealing with fraudulent and hostile third-party web-sites,
intrusion attempts, malicious code and other incidents.
• Provide support to the management of the Enterprise Vulnerability
Assessment tool.
SKILLS :
Essential Skills and Experience
• Application level penetration testing (HTTP including script, Java,
WebSphere, IIS etc)
• Manual and automated vulnerability analysis
Desired Skills and Experience
• CERT / CSIRT experience
• Computer Forensics, especially EnCase Forensic.
• Unix or Microsoft Windows systems administration
• UK or US criminal and civil law investigations.
Technical Systems experience
• IP based networking
• Windows enterprise platforms (NT, Win2000, Win Server 2003, Win XP)
• Unix (HP-UX, Solaris, Dynix, AIX, FreeBSD)
• Linux
• Z/Os / OS-390 / OS-400
• IDS (RealSecure) and Firewall (Checkpoint NG)
• Cisco platforms (IOS & CatOS)
• Malware analysis and reverse engineering
• Wireless assessments
• Enterprise vulnerability assessment tools
Indicative Qualifications
• MSc in Information Security (other academic qualifications will be
acceptable with proven practical experience.)
• CHECK Team Leader or OPST (or other relevant accredited qualification)
• ISC2 or SANS qualifications
• APCIP or equivalent
JOB REQUIREMENTS
---------------------------------------------------
Candidates must be eligable to work in the UK when applying
CONTACT
---------------------------------------------------
Information Security Solutions
Iain Sutherland
iain@InformationSecuritySolutions.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
