---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Technology Risk Consultant
Location: London, , United Kingdom
Type: Contract
Closing Date: 2007-07-10
Security Integrator
Reference No. SF-221
Company Global Banking Group
Location London
Rate £425/day
Start Date ASAP
Duration 6 months (possible extension)
No. Required 1
The Role
• Subject Matter Expert on IT security across the variety of platforms.
• Lead architecture design and review sessions with IT teams to ensure
that security is incorporated into projects at the earliest stages by
identifying potential risks and threats as well as mitigating designs or
controls.
• Provide specific engineering expertise into tactical project tasks.
Such areas might include securing databases, implementing encryption,
configuring wireless networks, etc.
• Help identify areas of infrastructure the Firm might want to invest in
to further improve the discipline of IT security. This could include
commercial tools, internally developed libraries, certification courses, and so
forth.
Skills Required*
• Strong interpersonal skills are critical, since the individual will be
interacting with IT clients and executives around the world, and must be able
to effect change and influence decisions.
• Platform: Although this role is not systems administration position,
the candidate must have deep knowledge of at least one primary operating system
(Unix or Windows), the configuration and management of that platform, the
security risks to that platform, and how to mitigate those risks.
• Network security: The candidate will be expected to thoroughly
understand the standard network model and the risks present at each layer, the
functions of network equipment such as switches, routers, firewalls, proxies,
and load-balancers, and to understand network architecture.
• Multi-tier application security: Many of our most important
applications are multi-tier applications, and the candidate will be expected to
understand how to secure all layers of an n-tier application. This includes
applications incorporating web services.
• Authentication issues: An understanding of system authentication
technologies (Active Directory and Kerberos in particular) and broader Identity
Management technologies (SiteMinder, SAML, Liberty Alliance, WS-Security) is
key.
• Across all topics, candidate should have expertise with
security-related topics such as authentication mechanisms, data protection,
validation checking, encryption, hashing, principle of least privilege,
software attack methodologies, physical security, social engineering, etc.
Genuine expertise is required here, as the candidate will be extensively tested
on security principles.
Additional Skills*:
• Experience in financial services is highly desired.
• Security expertise in multiple operating systems is strongly preferred.
• Programming: Experience with C/C++, Java, C# / .NET, Perl, and shell
programming would be beneficial.
• Automated testing tools: Experience with automated vulnerability
assessment tools (Watchfire), or with more general purpose testing tools (such
as Purify).
• Experience in formulating policy and ensuring compliance with
regulatory requirements
• Experience with mainframe technologies would be beneficial.
• Database design and security issues.
• Security expertise with MQSeries.
Educational Requirements
Bachelors Degree with min 5+ yrs relevant work experience in high-paced,
enterprise environment.
* SKILLS REQUIRED
Skills are divided into two categories, Required and Additional. All of the
Required skills must be present for a candidate to be considered. We do not
require all of the Additional skills, but will give clear preference to
candidates that demonstrate proficiency in a significant number of them.
JOB REQUIREMENTS
---------------------------------------------------
Candidates must be eligable to work in the UK when applying
CONTACT
---------------------------------------------------
Information Security Solutions
Iain Sutherland
iain@InformationSecuritySolutions.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
