---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Anywhere, , United States
Type: Permanent F/T
Closing Date: 2006-09-18
The Senior Application Security Specialist will perform application related
consulting activities for our clients. These would include application security
assessments, secure design and deployment reviews, Threat Models, code reviews,
network penetration testing, developer training and implementing of testing
strategies and security controls within corporate SDLC processes and policies.
JOB REQUIREMENTS
---------------------------------------------------
The Application Specialist consultant must possess the following qualifications:
Professional Qualifications
• Experience creating and reviewing technical documentation.
• Exhibits a professional and positive attitude
• Adapts readily to change
• Strong problem solving and analytical skills
• Strong written and oral communication skills
• Strong interpersonal skills
• Self-motivated, results oriented individual
• Strong multi-tasking ability
• Strong Project Management and Time management skills
Technical Qualifications
• Deep understanding of .NET and J2EE architectures and supporting
technologies with a focus on the security implications of the technologies and
how to mitigate the potential vulnerabilities imposed by insecure application
development. Solid coding skills in C/C++, .NET framework, and Java / UML and
OO methodologies
• Knowledge of database environments like Oracle, MS SQL and DB2, a plus
• Ability to provide training to customers technical staff covering
application security testing tools and testing methodologies, application
security best practices, secure code development practices, identifying
security flaws in code, and mitigating security strategies for applications
from the code level to the network
• Knowledge to perform application threat modeling, code reviews and
integrate security testing methodologies within corporate SDLC practices and
performing code review
• Knowledge of the OWASP minimum security standards for web applications
and experience implementing those testing methodologies and secure development
standards
• Expert-level knowledge of the principles of authentication,
authorization, availability, confidentiality, integrity, non- repudiation and
the technical means of achieving these principles;
• Experience with application security testing tools such as WebInspect,
WebScarab, Paros, etc.
• Two + years of related experience.
• At least one technical certification such as MSCD, MCSE, CISSP, CCNA,
CCDA, CCSA, GIAC, QDSP, QPASP. (CISSP preferred)
Education:
BS degree in Information Management Systems or a closely related field or the
equivalent (bachelor’s degree and five years progressively responsible
experience in Information Systems Administration, Network Design and
Administration, Application Design and Development)
CONTACT
---------------------------------------------------
Please email your resume to ktrivedi@accuvant.com
I will get in touch with you shortly
Accuvant
Kartik Trivedi
ktrivedi@accuvant.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
