[SJ-JOB] Security Researcher, Atlanta
[email protected] 11 Sep 2008 16:58:53 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Security Researcher Location: Atlanta, Georgia, United States Type: Permanent F/T Closing Date: 2008-10-11 JOB DESCRIPTION: SECURITY RESEARCHER With over 2,000 clients, SecureWorks has become one of the leading Security as a Service providers safeguarding more organizations 24x7 than any other vendor. Positioned in the Leader's Quadrant in Gartner's Magic Quadrant for Managed Security Services Providers (MSSPs), SecureWorks is the only named leader that focuses exclusively on information security services. SecureWorks protects our clients through our on-demand Security Information and Event Management (SIEM) platform augmented with applied security research and 100% GIAC-certified experts. SC Magazine 500 fastest growing privately held list Winner of the 2006, 2007, and 2008 MSSP of the year award by Secure Computing magazine POSITION SUMMARY As a SecureWorks research team member you will play an exciting and fundamental role in protecting our clients from malicious activity. Your day to day duties will include analyzing and responding to newly discovered vulnerabilities and malicious software instances, including developing countermeasures where time and accuracy is of the essence. Original security research, software design, and acting as an in-house security expert are, to varying extents, also part of this role. Candidate should be experienced in the field and have strong written and verbal communication skills and the ability to apply their knowledge of security practices and concepts over a wide range of products and services. Ideal candidates should have a wide breath of skills, ranging from scripting to application/system level programming, system administration, networking, vulnerability assessment and discovery and the ability to leverage those in detecting and analyzing new threats and vulnerabilities to protect our clients. Most importantly a candidate should have strong analytical and problem solving skills, and the ability to use those in a fast pasted team oriented environment. Technical Experience: Strong knowledge of information security concepts and practice including the following areas: software vulnerabilities and exploitation, intruder behavior, IDS/IPS, Unix and Windows system programming, TCP/IP and related protocols packet structure and behavior, internet infrastructure, reverse engineering and assembly code, software algorithm design and optimization, and other skills Essential Duties & Responsibilities • Research of publicly known vulnerabilities; from information collection to testing and analysis • Organizes and participates in the development and maintenance of custom code used to analyze network traffic and proprietary protocols, develops attack and defense methodology and code on high risk computer networks • Conducts penetration testing and vulnerability assessments • Responsible for working with peers and senior engineers to identify security issues of existing platforms and applications. • Responsible for developing technical solutions for information operations and analysis related to national security topics intrusion analysis, systems and vulnerabilities, network security, advanced analytic tools and data visualization techniques • Performs advanced analysis and/or reverse engineering of suspect source code. • Writes scripts and develops software utilities to automate security analysis efforts. • Participates in both National and International forums for the development of significant new concepts or novel approaches to Security • Maintaining the accuracy and integrity of information through all phases of a report • Positive and interactive customer interface and communication skills (verbal, written) are required. • Authors technical papers, reports and proposals for internal and external release as well as represents the organization by giving technical presentations in large public forums. • Continually build and maintain customer relationships and support customer request with briefings and papers. Additional Responsibilities • Perform other essential duties as assigned JOB REQUIREMENTS --------------------------------------------------- Skills, Knowledge & Abilities • Must be self-directed, and willing to pursue and maintain various technical/security certifications as necessary for the position • Must possess excellent written and verbal communication skills • Must possess strong analytical capabilities and have a desire to learn new things • Experience working with complex, sophisticated clients • Unquestioned integrity and personal ethics; willingness to provide feedback in challenging situations. • Experience in the following programming languages: C/C++/Java/Perl/Python/Intel x86 Assembly • Strong understanding of security technologies (Firewalls, IPS, IDS, etc) • Ability to serve as final point of escalation for internal/external client issues. • Regular expressions and techniques for data processing/manipulation • Reverse Engineering • Software design and optimization • Understanding of Cryptography a plus • Forensics skills and plus • Education and Experience: • Bachelors Degree or Master’s degree in Technical discipline is preferred • At least 3 years of experience preferred • Understanding of Cryptography a plus • Forensics skills and plus • Strong understanding of TCP/IP, as well as common protocols (HTTP, SMTP, FTP, DNS, etc) • Linux/Unix experience • • Preferred Technologies o C/C++, x86, SPARC, and other assembly languages, .Net Intermediate Language, JAVA, Python, Perl, PHP, ASP, SQL, C#, Cyclone, Basic, and other languages. CONTACT --------------------------------------------------- Please email cover letter and resume to careers SecureWorks Inc. Sheryl Shectman [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs