---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Engineer
Location: Washington, District of Columbia, United States
Type: Permanent F/T
Closing Date: 2007-11-11
Security Test Engineer
Clearance:
Top Secret with the ability to get a SCI
Principal Duties and Essential Functions:
Lead/participate in Security Certification and Accreditation Assessments,
Security Assessments, and Penetration Testing on agency systems in accordance
with NIST and DCID 6/3 guidance.
Activities include; system documentation review, validation of processes and
procedures, vulnerability assessments, and penetration testing. You will also
be required to write test and penetration plans as well as document your
results both for the technical and non-technical audience. Additional
activities include; analyze and evaluate the suitability of proposed security
architectures for new IT systems and networks. Work with certification and
accreditation authorities to define appropriate system and network security
assurance requirements. Customer is FBI.
Basic Qualifications:
To be considered for this position, you must hold a Top Secret security
clearance, with a current background investigation and be eligible for
Sensitive Compartmented Access (SCI). Qualifications include a Bachelors degree
and a minimum of 9 years experience to include first-hand expertise as a
principal security certification or accreditation analyst. Non-degreed
applicants must have a minimum of 10 years experience and education to qualify.
Must have prior direct experience in one of the following; 1. Solid experience
with Sun technologies; entry level to high-end servers in cross-domain
environment, Solaris TSOL8, 9/10 with trusted extensions, and other sun
software based solutions, such as IM. Or, 2. Solid experience developing
complex web applications with ASP/.Net, Flash, Ajax, JAVA. Ideal candidate
would have both sets of skills. THESE ARE THE KEY SKILLS. We will talk with
anyone who as one or both of these skills even if they don’t have security
experience.
Familiarization with commercial and open source discovery, vulnerability
assessment, and penetration testing tools is preferred: i.e., nmap, Nessus,
WebInspect, Coreimpact, Kismet, run-live distros, Wireshark, SRR, VMware, and
Windows Scripting and others. IBM mainframe operating systems and applications
experience is also a plus.
JOB REQUIREMENTS
---------------------------------------------------
Security certifications (e.g., CISSP, GIAC) and technical certifications (e.g
MCSE, CNE, CCDP) are also a plus.
CONTACT
---------------------------------------------------
wes brin
wbrin@kforce.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
