[SJ-JOB] Security Engineer, Ft. Lauderdale
[email protected] 16 Sep 2008 19:05:24 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Security Engineer Location: Ft. Lauderdale, Florida, United States Type: Permanent F/T Closing Date: 2008-10-13 Scope of Role: As an integrated member of the development team, the Security Engineer will contribute on product security issues throughout the development lifecycle for various products. The technical areas include: cryptography, network vulnerabilities, physical (electronic) security, defensive coding and electromagnetic emanations. The security engineer is required to collaborate with 3rd party companies and subcontractors in order to obtain the required product certifications, which include; FIPS, Common Criteria, CAPS and other government’s standards. The security engineer must liaise with evaluation laboratories and provide them with the technical information they need on the product and to make credible justifications on technical security positions. The security engineer is responsible for managing the evaluation and certification process as well as the relationship between the engineering team and the evaluating body. JOB REQUIREMENTS --------------------------------------------------- Responsibilities: • Primary company contact for the latest information security practices including authentication, encryption, and key management; • Collaborate in the creation of product functional specifications for new products to ensure security requirements are addressed; • Lead the Federal Information Processing Standards (FIPS) 140 and Common Criteria (CC) security certification process for the company's new and existing products with the objective of obtaining certification; • Provide training to the developers on how to create FIPS 140 and CC certifiable designs; • Escalate security design decisions and certification issues to management; • Initiate security enhancements on existing products which positively affect the product's marketability; • Keep abreast of emerging security technologies as required by the business. Skill/Requirements needed: • 5+ years of direct experience relating to security certification of commercial products. • Security evaluation experience, preferably with FIPS-140-2 and/or CC. • Strong communication, presentation, and negotiation skills. • Ability to work in a fast paced environment with minimal direct supervision. Desired Skills: • Experience with National Security Agency's Functional Security Requirements Specification. • Experience with National Institute of Standards and Technology Cryptographic Module Validation Program. • Professional certification as a Certified Information Systems Security Professional (CISSP). • Understanding and experience with product release engineering practices. Education Required: BSEE, BSCS, or equivalent experience required. MSEE or MSCS preferred. CONTACT --------------------------------------------------- Please email your resume, salary expectations and availability to [email protected]. You can also apply through our website: www.jpatrick.com. J. Patrick & Associates Julia Carrillo Technology Recruiter [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs