---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Austin, Texas, United States
Type: Permanent F/T
Closing Date: 2007-03-02
Dell Inc., a premier provider of products and services required for customers
worldwide to build their information-technology and Internet infrastructures,
is seeking an experience Software Security Advisor at our Austin, Texas
location. The successful candidate will provide security advisory services and
guidance to various Dell teams in ensuring the security of internally and
third-party developed software and services. Ensure adequate security of Dell
offered services and software.
Responsibilities include:
Risk Assessment
Evaluate results of development teams efforts to assess potential business risk
associated with new software initiatives.
Work with product teams, privacy, legal and other constituents to tailor
efforts around software security based upon potential business risk.
Facilitate workshops with development and architecture teams to develop Threat
Models for software programs.
Secure Development
Advise software development teams in designing and implementing baseline
standards for secure software development.
Advise software development teams in designing and implementing processes to
tailor security controls to areas of risk highlighted in threat modelling.
Advise software development teams in the use of tools for conducting unit
testing of code for security vulnerabilities.
Security Testing
Advise test teams in the implementation of processes to ensure thorough testing
of product security features.
Advise test teams in the implementation of processes to devise security testing
based upon the outputs of threat models.
Advise test teams in the implementation of processes to ensure thorough testing
for identification of security vulnerabilities.
Advise test teams in the use of tools for conducting automated testing and code
review.
Training and Education
Advise in establishing Threat Modelling training for development teams.
Advise in establishing Secure Software Development training for architects and
developers.
Advise in establishing Security Testing training for test teams.
Independent Security Assessment
Manage the conduct of independent security assessments of software as warranted
by risk.
Track vulnerabilities and action plans to closure.
Work with product development teams to ensure timely and complete remediation
of identified vulnerabilities prior to launch.
Report results of assessments to product team executive management.
Incident Response
Advise product teams on severity of vulnerabilities discovered in software.
Monitor to ensure timely production and testing of software security patches.
FSR and Reporting
Lead "Final Security Reviews" prior to product launch to ensure that all
requirements of Secure Development Program have been met.
Communciate "Go / No-Go" decisions to management.
Report outcomes of efforts in ensuring product security to all relevant parties
while maintaining the confidentiality of sensitive product information.
JOB REQUIREMENTS
---------------------------------------------------
Strong oral and written communciation skills.
Ability to work with people of varying technical proficiency.
Thorough understanding of Software Development processes.
Strong understanding of secure software development.
Detailed knowledge of Threat Modeling methodologies.
Experience with industry standard models for evaluating/characterizing the
severity of vulnerabilities.
Commercial software development experience in Java (J2EE), C, C++, ASP.NET
(C#), ASM, and/or other.
Balanced understanding of the business, technical, customer, and legal
implications of software security.
CISSP or other certifications preferred.
Bachelors degree required, Masters degree preferred.
5-7 years of applicable experience.
CONTACT
---------------------------------------------------
Qualified candidates should submit their resume and any other applicable
materials via e-mail to "SecurityJobs (at) Dell (dot) com".
We will respond only to candidates who clearly meet the job's requirements.
SecurityJobs@dell.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
