---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Reston/Dulles, Virginia, United States
Type: Permanent F/T
Closing Date: 2007-05-03
This position is within AOL's IT Security Assurance team, whose mission is to
deliver security consultation, risk assessment and infosec management services
geared towards safeguarding AOL's products, applications and infrastructure,
and protecting AOL's Corporate information assets.
Primary Responsibilities
1. Provide risk assessment and consultation services, including activities such
as:
- Product, application and infrastructure vulnerability/risk assessments
- Performing hands-on security evaluations, penetration testing, and auditing
of applications and systems infrastructure
2. Assist in development of technical security policies, standards, baselines
(procedures), and training/outreach programs such as:
- Author and maintain technical security standards to govern operating
practices within various information security subject areas [ie, operating
system security, use of encryption, network security, authentication,
authorization, and auditing (AAA), etc.]
- Develop, maintain, and deliver training content in various information
security subject areas for the purposes of employee awareness and education
3. Engineer security solutions to protect a variety of users, applications,
platforms and computing environments, including development and maintenance of
security auditing and vulnerability assessment tools, methodology, and
procedures
JOB REQUIREMENTS
---------------------------------------------------
- 4-6 years experience in performing technical risk assessments, web systems
penetration testing, security engineering, or secure systems development in a
heterogeneous, multi-platform, multi-protocol environment
- Demonstrated knowledge of information security principles, standards,
practices and subject areas
- Demonstrated knowledge of information security management and assurance
models, standards and control objectives, such as NSA IAM/IEM, ISO 17799,
Payment Card Industry Data Security Standard (PCI DSS), and Sarbanes-Oxley
- Proficiency with various network, host and application security protocols,
tools, and vulnerability assessment packages
- Excellent written communication skills and the proven ability to present
complex, technical information to both technical and non-technical audiences
- Solid organizational skills and strong customer service experience
Skills Desired:
- Secure software development experience and/or solid scripting/coding skills
- Knowledge of cryptographic standards, ciphers, algorithms and PKI
CONTACT
---------------------------------------------------
If interested in this position, please write to SecJob [at] aol [dot] com and
submit your CV/resume.
AOL, LLC
Sec Job
SecJob@aol.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
