---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Engineer
Location: New York, New York, United States
Type: Permanent P/T
Closing Date: 2006-11-12
Position Summary The Security Engineer,(CISSP Certification) is
responsible for the protection of the firm’s physical and non-physical
Information Technology assets using various tools. This includes, but is not
limited to Microsoft products, Active Directory, firewalls, IDS etc. Main
duties include designing, implementing and maintaining network and computer
security policies; ensuring that all systems are safeguarded against all forms
of malicious intrusions; assisting other groups within the firm in developing
secure systems.
Principal Responsibilities • Evaluate network architecture
and hardware/software configurations for security vulnerabilities.
• Participate in the review and analysis of internal projects and
external connectivity issues that may have an impact on security
• Ensure effectiveness of security controls for Windows, Active
Directory, Citrix security etc.
• Perform vulnerabilities assessments to identify both architectural and
platform-specific vulnerabilities
• Coordinate with all concerned parties to ensure the implementation of
all security patches and updates, as well as anti-virus, anti-malware software.
• Coordinate and support information security efforts, to include, but
not limited to: (a) work with application developers and database
administrators to plan and implement application security on intranet and
extranet (in the DMZ) servers; (b) provide guidance on risks and
vulnerabilities related to common application protocols and web services
security; and (c) participate in planning, design, and implementation of
Windows infrastructure protection schemes.
• Conduct periodic network/application penetration tests, using either
in-house or outside resources.
• Review security audits and bring awareness to security problems and
issues; improve security settings of WinTel including Citrix devices, create
baseline configuration standards for various platforms.
• Keep abreast of emerging security technologies and make appropriate
recommendations regarding their implementation.
• Provide support to analyze Windows logs, network/host based syslog logs
etc.
• Create control standards and information security policies as needed
• Participate in organization’s Threat & Vulnerability Assessment
process, Incident Response Process.
JOB REQUIREMENTS
---------------------------------------------------
Experience • Seven or more years of experience in technical
information systems positions, with at least 5 years experience in a pure
information security position (firewall engineer, IDS engineer, penetration
tester, etc.)
• Experience with information security policies, incident response
procedures, risk analysis, and significant experience administering the
operations of a complex security infrastructure.
Knowledge/Skills • Must have active directory and windows
configuration experience.
• In-depth understanding of IP networking, networking protocols and
security-related technologies. These include encryption, IPsec, PKI, RADIUS,
PGP, firewalls, proxy services, DNS, DHCP, SSL, code signing, digital signature
and digital rights management.
• Extensive knowledge with Microsoft products (MCSE certification is a
plus)
• Excellent analytical, troubleshooting & interpersonal skills
• Strong verbal and written communication skills
• Knowledge of Web technology is a plus.
Education, Training or Certification Degree (or higher) in a
technical discipline or related experience preferred and CISSP Certification
CONTACT
---------------------------------------------------
Please submit a Word Verion Resume to John Ahn:
john@altaassociates.com
Alta Associates, Inc
John Ahn
Senior Recruiter
john@altaassociates.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
