---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Sr. Security Engineer
Location: London and UK, , United Kingdom
Type: Contract
Closing Date: 2007-01-13
REF: Sr Sec-analyst-UK
As a senior information security analyst, the person in this position will have
broad areas of responsibility including network and system audit and
penetration testing, vulnerability scanning and mapping, and exploit research.
Critical area of responsibility for this position is in penetration testing and
requires extensive knowledge of how to exploit and undermine system and
software weakness and areas of vulnerability without disrupting vital business
systems and processes.
JOB REQUIREMENTS
---------------------------------------------------
Responsibilities:
› Penetration testing – Network
› Penetration testing - Application
› Participate in the formalization of security problems, identification
of vulnerabilities and exploits
› Knowledgeable of current O/S and application vulnerabilities, exploit
code and common methods of attack and penetration, privilege escalation,
password cracking, as well as other aspects of penetration testing
› Must be capable of leading major IT and information security project
through to successful completion.
› Management of research exploit projects and teams
› Write and direct the publication of security advisories, technical
papers, project information and shared software tools for public use.
› Work efficiently and understand the need to produce results within
deadlines.
Required skills:
› Penetration testing in network and application environments
› Penetration testing experience with Core IMPACT, Canvas, Metasploit and
custom scripts
› Thorough understanding of the Unix / Linux operating systems in attack
environments.
› Experience with network architecture and security design
› Requires knowledge of how to exploit and undermine system and software
weakness
› Must be capable of leading major IT and information security project
through to successful completion.
› Knowledgeable of current O/S and application vulnerabilities, exploit
code and common methods of attack and penetration, privilege escalation,
password cracking, as well as other aspects of penetration testing,
› Experience with Apache, IIS, Netscape and Sun web servers and web
application development.
› Knowledge of programming Web-Based programming (Java, SOAP, Ajax, PHP)
› Experience with Cisco, Juniper, Microsoft / UNIX / Linux O/S and
application vulnerabilities and their identification
› Understanding of SQL-Injection, Cross-site-scripting, and other web
application vulnerabilities.
› Knowledge of networking suite / protocols such as TCP/IP, UDP, HTTP,
FTP, RPC, SSL, SSH, SMTP and SNMP
› Knowledge and hands-on with VoIP systems and protocols, including SIP,
H.323, Megaco and Skinny.
› Understanding of Firewalls, Intrusion detection system (IDS), Intrusion
prevention systems (IPS) and evasion techniques
› Experience with access control and identity management
Desired skills:
› Experience in Software Engineering
› Experience in Security / Architecture / Penetration Testing
› Writing exploit code
› Experience with protocol manipulation
› Cryptography
› Knowledge of Mathematics or Theoretical Computer Science.
› Must be able to communicate effectively at all levels including:
network or systems administrator, IT Manager, Project Mangers, Business Unit
Executive, Sr. Management and Executives
› Understanding of the non-technical, technical and business impact of
the discovered vulnerabilities on the system.
› High analytic skills
› Technical Writing
› Intellectual Property
Studies:
› University student or graduate in Computer Science, Mathematics or
Engineering.
Languages:
› Fluent in English (spoken and written)
Other Skills:
› Self motivated initiative, team spirit, inquisitiveness and commitment
to quality
› Solid interpersonal relationship
› Ability to develop in diverse environments
Please provide current CV and cover letter explaining relevant experience and
qualifications for this position
A sanitized portfolio of Penetration Testing / Vulnerability Assessment reports
is desireable
CONTACT
---------------------------------------------------
Only those candidates deemed to be qualified for this position will be
contacted.
Please forward email with resume, salary target, and availability. Candidates
must eligible to work in the UK.
No agencies please. No phone inquiries please
Please provide current CV and cover letter explaining relevant experience and
qualifications for this position
A sanitized portfolio of Penetration Testing / Vulnerability Assessment reports
is desireable
iVOLUTION Security Technologies
Tracy Little
HR
hr@ivolutionsecurity.co.uk
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
