---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Penetration Engineer
Location: Montvale, New Jersey, United States
Type: Permanent F/T
Closing Date: 2007-10-05
KPMG LLP, the audit, tax and advisory firm (www.us.kpmg.com), is the U.S.
member firm of KPMG International. KPMG International’s member firms have
113,000 professionals, including more than 6,800 partners, in 148 countries. We
offer our clients industry insights and a multidisciplinary range of services.
We are currently seeking a Project Manager-Security Tester to join us in our
Montvale office.
Responsibilities:
- Handle the timely execution of technical security test efforts, providing
accurate and timely reporting of test procedures and results
- Provide technical security testing including vulnerability assessment,
penetration tests and other testing initiatives that may be defined by the firm
- Responsible for communications with internal clients regarding technical
vulnerability profiles, risk management issues and the remediation process
- Coordinate with application houses and product groups to identify
requirements in the area of testing to help enable them to better manage
Information Technology (IT) risks
- Develop and approve detailed test plans that conform with the testing
methodology
- Review and approve test reports for tests performed
- Maintain and develop various testing tools
- Monitor various security information sources on a daily basis to identify
emerging threats against current/future tested environments
JOB REQUIREMENTS
---------------------------------------------------
Qualifications:
- Bachelor of Science or Arts from an accredited college/university
- Eight years of experience in Information Technology
- Five years of experience in performing vulnerability assessments and
penetration tests in complex, advanced IT environments
- Good understanding of IT risk and security controls
- Excellent understanding of existing testing tool methodologies and techniques
to be able to make maintenance updates and small/ medium changes to the tools
to suit the internal processes and testing needs
- Excellent understanding of the security and testing aspects of the Unix and
Windows Operating Systems
- Excellent understanding of web application technologies, web programming
languages and web technologies (web servers, application servers etc.)
- Good working knowledge of Microsoft database products like Access and SQL
- Working knowledge of at least one scripting language (Perl/Python) and high
level programming language (C/C++)
- Knowledge and experience in ASP and ASP.NET
- Good understanding of threat modeling and SDLC security aspects
- Good working knowledge of Microsoft Office products, particularly Outlook 2003
- Good ability to assimilate technical information and express it clearly in
business language to both internal and external clients
- Good analytical skills and strong business orientation
- Hands on experience with development of multi layered web applications
- Strong written and verbal skills
CONTACT
---------------------------------------------------
rmnair (at) kpmg.com
KPMG LLP
Rithesh Nair
rmnair@kpmg.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
