---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Penetration Engineer
Location: Montvale , New Jersey, United States
Type: Permanent F/T
Closing Date: 2006-07-24
For More info rmnair@kpmg.com
KPMG LLP provides audit, tax and advisory services to a broad range of clients.
KPMG’s commitment to its clients is demonstrated in our client service
delivery approach with cross-functional teams that extend across industry
segments. We are currently seeking an Information Security Senior Associate to
join us in our Montvale office.
RESPONSIBILITIES:
• Perform vulnerability assessments and penetration tests for Information
Technology (IT) projects
• Assist in the development of detailed test plans in compliance with
KPMG’s testing methodology
• Assist in the maintenance and development of testing tools
• Daily monitoring of security information sources (various) to identify
emerging threats against current/future KPMG environments
• Help ensure the timely completion of testing deliverables in line with
the RASP process
• Provide advice in respect of remediation options for vulnerabilities
that are identified through the testing process
• Assist, through testing, in the product selection process by
identifying vulnerabilities within vendor products or services
JOB REQUIREMENTS
---------------------------------------------------
QALIFICATIONS:
• Bachelor of Science (or Arts) degree from an accredited
college/university
• Two years of experience in performing vulnerability assessments and
penetration tests in complex, advanced IT environments
• Strong skills in penetration testing at the application, host and
network levels
• A good understanding of the areas of IT and technical security controls
with knowledge of the following:
o Excellent understanding of existing testing tool methodologies and
techniques to be able to make maintenance updates and small/ medium changes to
the tools to suit the internal processes and testing needs. (Testing tools
include the various scanners, exploits, scripts and dedicated software used for
security testing)
o Excellent understanding of the security and testing aspects of the Unix
and Windows Operating Systems.
o Excellent understanding of Web application technologies, Web
programming languages and Web technologies (Web servers, application servers
etc.)
o Good working knowledge of Microsoft database products like Access, SQL.
o Working knowledge of at least one scripting language (Perl/Python) and
high level programming language (C/C++).
o Good understanding of threat modelling, SDLC security aspects
o Good working knowledge of Microsoft Office products, particularly
Outlook 2003
o Good ability to assimilate technical information and express it clearly
in business language to both internal and external clients; Good analytical
skills and strong business orientation
• Able to travel internationally
Please include salary requirements within resume text
KPMG offers and supports flexible work arrangements as well as part-time
schedules. We also offer a comprehensive compensation and benefits package.
Interested? Please send your resume referencing Code 06840289. We strongly
encourage you to apply online at www.kpmgcareers.com referencing the Job Code
indicated above; resumes received through our Web site are available for
consideration as early as the next business day. Alternatively, you may send a
scannable resume to: KPMG Centre, Attn: Resume Processing, 717 North Harwood
Street, Suite 3100, Dallas, TX 75201-6585. Include the Job Code indicated
above in all cases.
No phone calls or agencies please.
KPMG Affirmative Action, Equal Opportunity Employer, M/F/D/V.
© 2006 KPMG LLP, the U.S. member firm of KPMG International, a Swiss
cooperative. All rights reserved.
CONTACT
---------------------------------------------------
rmnair@kpmg.com
KPMG LLP
Rithesh Nair
Recruiter / Researcher
rmnair@kpmg.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
