---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Boston, Massachusetts, United States
Type: Permanent F/T
Closing Date: 2007-10-05
Rapid7, founded in 2001 and headquartered in Boston, is an information security
leader, providing a comprehensive suite of products and services for
vulnerability and risk assessment. Rapid7’s Professional Services
Organization performs vulnerability and risk assessments, security audits and
penetration testing for our clients and is looking to hire a security
consultant to expand our rapidly growing practice. Key areas of responsibility
include:
*Performing engagement tasks according to scope of work by:
- Participating in the requirements gathering process
- Developing and implementing security solutions and work plans aligned with
customer business objectives
- Conducting security assessments, audits and penetration tests using Rapid7
Methodology
*Growing to support all security practice offerings in pre- and post-sales roles
*Meeting professional practice standards and demonstrating competence in core
service areas
*Developing and maintaining positive relationships with clients
*Executing delivery work that exceeds expectations based on strong
understanding of the client’s business and needs
*Participating in industry conferences and professional organizations
*Creating additional value for clients through continual insights and
consultative advice based on experience with the client, their industry,
established standards, and leading practices.
*Obtaining and maintaining relevant certifications.
JOB REQUIREMENTS
---------------------------------------------------
EDUCATION and/or EXPERIENCE
*Bachelor’s Degree
*Two or more years experience in IT, security, risk management, or professional
services.
*CISSP, GIAC or CISA or willingness to attain these certifications
*Strong written and verbal skills
*Understanding of security principles, policies, and industry best practices
*Knowledge or experience with ISO 17799, PCI, GLBA and HIPAA
*Experience with using, customizing and developing open source security tools
*Experience in multiple programming languages and shell scripting
*Experience in system administration of Windows, Linux, and BSD.
*Strong understanding of cross-site scripting and SQL injection vulnerabilities
and attacks
*Understanding of wireless LAN protocols and various WLAN vulnerabilities and
attacks
*Conceptual understanding of protocol and application fuzzing or experience
with fuzzing tools
*Knowledge of social engineering techniques such as phone pre-texting or email
phishing
*Desire to learn new and different approaches.
A willingness to commit to up to 50% travel is required. Also due to the
sensitive nature of the work involved all consultants must be able to
satisfactorily pass a background check.
CONTACT
---------------------------------------------------
Please email james_patterson [-at-] rapid7 [-dot-] com with your resume.
James Patterson
james_patterson@rapid7.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
