---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Application Security Engineer
Location: New York, New York, United States
Type: Permanent F/T
Closing Date: 2007-12-27
This position is expected to evaluate business project requirement, assess
information security risks to the company and provide solutions to reduce risk
through the use technology, awareness/training and process. This position will
play a consulting role in all phases of projects by providing Information
Security guidance and recommendations. This position ensures that in-house
developed applications and vendor products comply with all relevant and
applicable information security and privacy regulations and best practices.
Key Accountabilities:
• Support existing client, vendor, and IT relationships, and achieve
desirable project results.
• Research and participate in the acquisition of new and relevant
information security technologies.
• Participate in benchmarking, evaluation and selection of new information
security tools
• Develop and maintain understanding of regulations impacting information
security, privacy and compliance
• Understand and tactically execute information security goals.
• Develop and deliver awareness and training materials for Information
Security and Privacy policies and procedures
• Manage and maintain key Information Security tools use for compliance,
incident response and assessment purposes.
• Create and maintain documentation on information security policies and
procedures
• Conduct risk assessment and information security and privacy reviews;
participate in information security project checkpoints
• Consults with IT and business management in the development of tactical
security plans and directions to assure proper security and privacy controls
have been implemented.
• Act as part Information Security Incident Response team including 24/7
on-call rotation.
• Maintain and enhance hands on technical skills as well as tactical
understanding of information security concepts and best practices
• For Information Security projects: create project charter and detailed
project plan; support project budgeting; manage task execution; craft and
distribute stakeholder communications
JOB REQUIREMENTS
---------------------------------------------------
Key Competencies:
• Able to act as part of team and lead teams as necessary.
• Working knowledge of technology trends and tools
• Competent in a variety of communication skills (interpersonal, formal
presentation, meeting management, and conflict resolution)
• Demonstrated innovation skills
Functional/Technical
• Demonstrated expertise in technical requirements gathering
• Highly proficient in logical and physical database design
• Demonstrated mastery of application security techniques and best
practices
• Demonstrated knowledge of application development and/or configuration
Java, Perl, C#
• Working knowledge of software vulnerabilities (i.e., SQL Injection, XSS,
buffer overflows).
• Competent in application troubleshooting and problem resolution
Supervision:
It is expected that the Information Security Engineer will report to the Senior
Director of Information Security and require a moderate level of direct
supervision. On a project basis, the position may also be supervised by
additional managers and senior level team members.
May supervise, guide and provide training to the Information Security staff and
consultant. Assists the Senior Director in the review and evaluation of the
work of the staff, planning, organizing and controlling the activities of the
section and in the development of the overall project plans and timetables.
Certifications preferred, but not required:
• CISSP, CISM, CISA, GIAC
Minimum Years Experience:
3 years in IT industry
CONTACT
---------------------------------------------------
Please email your resume to ryan.brogan@timewarner.com
Time Inc.
ryan brogan
ryan.brogan@timewarner.com
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
