---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Jr. Security Analyst
Location: Boston, Massachusetts, United States
Type: Permanent F/T
Closing Date: 2006-07-21
ClearPoint Metrics is seeking creative individuals who have an interest in
information security and strong analytical abilities to supplement our existing
Metrics Development team as Security Metric Analysts.
ClearPoint Metrics produces software that enables the calculation and
communication of security metrics – quantitative expressions of the state
and quality of information security – for enterprise customers. Security
Metric Analysts will be responsible for developing and maintaining metrics
around specific topical areas, analyzing security products, and contributing to
regular updates and releases of metrics models.
This role involves understanding and analyzing IT security risks, and
developing creative ways to use quantitative models to express the state and
quality of an organizations IT security. These security metrics will then be
expressed in our toolset and driven by data from existing security products.
These metrics and scorecards will be used in our security metrics products to
enable CIOs and CISOs at major corporations to improve the management of their
enterprise security.
This is an entry to mid-level position in a groundbreaking field, so it is
expected that significant learning will occur on the job. The ideal background
for a candidate would combine information security experience (personal or
professional) with quantitative modeling experience (such as system dynamics,
statistics, model-building, or even excel power-use).
JOB REQUIREMENTS
---------------------------------------------------
Activities of the Security Metric Analyst include:
• Understand and remain aware of IT security developments around threats,
vulnerabilities, and countermeasures.
• Become knowledgeable on government rules and regulations that impact IT
security, participate in security consortiums such as securitymetrics.org and
securityfocus.org.
• Understand and use best practices in the design of new and valuable
metrics for measuring all aspects of the security infrastructure of large
enterprises.
• Work with a small team to design and implement the business logic,
database, and system interfaces for metrics and graphical scorecards for
security risks.
• Research security products and analyze the data they produce.
collaborate with engineering to to access the data.
• Write and communicate effectively. Document designs, host design reviews
of your work, and give constructive feedback to other engineers.
• Support and assist with unit testing and other quality-centric software
development practices. Actively participate in bug identification and
reporting.
The ideal candidate should possess:
• Bachelor degree in computer science, statistics, mathematics, or
equivalent.
• Understanding of IT security concepts and practices, and familiarity
with security products such as Vulnerability Scanners, Anti-Virus products,
etc. on both a conceptual and practical level.
• 2+ years experience with enterprise IT systems (as a user, analyst,
consultant, administrator, etc.).
• Experience and knowledge of quantitative risk analysis and modeling (you
must be understand the difference between mean and median).
• Be able to express concepts and formula verbally and written, as
algorithms, and with programming language concepts, ideally Javascript.
• Practical experience with databases and SQL is useful.
CONTACT
---------------------------------------------------
Please send your resume as plain text in the email body and also as an
attachment to careers@clearpointmetrics.com.
You can also see this job description along with additional software job
openings on our website, www.clearpointmetrics.com.
ClearPoint Metrics
careers@clearpointmetrics.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
