---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------
JOB DESCRIPTION
---------------------------------------------------
Position: Security Consultant
Location: Singapore, , Singapore
Type: Permanent F/T
Closing Date: 2008-02-23
•Perform penetration testing or security assessment of clients’
network infrastructure, systems and applications
•Assess and detect application security vulnerabilities through source
code analysis, security testing and design architecture review.
•Carry out Risk Assessment exercise to assess, estimate and evaluate the
risks and controls of the clients’ IT environment
•Assess adequacy and effectiveness of IT controls to safeguard
confidentiality, integrity and availability of IT systems
•Report identified vulnerabilities to the clients and recommend mitigating
controls to address the security gaps
•Design and implement security management solutions (for e.g. Identity
Management & SIEM).
JOB REQUIREMENTS
---------------------------------------------------
Required skills & experience:
•Experience with network and application penetration tests
•Knowledge of information security concepts and best practices
•Knowledge of web application security, including application
vulnerabilities (e.g. input validation) and standards (e.g. OWASP)
•Knowledge of systems security, including operating systems (Unix –
Linux, Solaris / Windows) and system software security configuration
•Knowledge of network security, including network security architecture
and implementation of network security devices (e.g. firewall, IPS)
Complementary skills & experience:
•Experience with application source code review
•Knowledge of security framework and standards, such as ISO17799 / 27001
•Experience with identity management solution (including single sign-on)
•Experience with security information and event management solutions
•Experience in software development and knowledge of programming
languages, scripting languages and development platform, such as C, Perl,
BASH, J2EE and .NET
•Knowledge of software development lifecycle (SDLC) methodologies
Other soft skills:
•Ability to interact with clients and communicate risk and security issues
in business context, i.e. translate technical risks to business risks
•Initiative to identify opportunities to deliver security advisory
services to clients.
•Interest in learning and gaining knowledge on new security issues,
vulnerabilities and technology
CONTACT
---------------------------------------------------
Please submit CV via email
KPMG, Singapore
Shik Kiong Kan
Associate Director
skan@kpmg.com.sg
---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.
http://www.securityfocus.com/jobs
