[SJ-JOB] Application Security Engineer, Santa Clara
[email protected] 16 Sep 2008 19:05:25 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Application Security Engineer Location: Santa Clara, California, United States Type: Permanent F/T Closing Date: 2008-10-16 The Security Software Developer is responsible for conducting internal application security assessments against Citrix products and for performing analysis and mitigation of issues. The Security Engineer will ensure that security awareness and protections are incorporated into the design and development of software for the Citrix Product Line in order to prevent vulnerabilities from being exploited by malicious users. Other responsibilities will include: • Perform on-going application security analysis using a range of techniques, including: source code review, design review, threat modeling / attack tree derivation, and the use of automated and non-automated security analysis tools • Conduct technical and risk analysis of any identified security vulnerabilities in Citrix Products • Raise any confirmed vulnerabilities using the Citrix bug tracking systems • The tracking, incorporation and compliance of commercial and governmental (domestic and foreign) security standards for Citrix products • The ability to conduct security audits and reviews of designs and source code for features and components to be developed or already existing in the product. • Conduct threat assessments • Develop test beds and conduct security penetration testing • Mentoring and formal training of engineering personnel on security awareness in software designs, implementation and testing • Coordinate product security architecture. JOB REQUIREMENTS --------------------------------------------------- • 3-5+ years of security analysis and security software development in a commercial environment (i.e., shrink wrapped software development) • Very proficient in analyzing application source code and identifying any potential security vulnerabilities or weaknesses. • In depth knowledge of a range of development tools, languages and processes. • Some knowledge or hands-on experience of Citrix products, specifically NETScaler, WANScaler and Access Gateway, is desirable. • Detailed understanding of the various security mechanisms provided by modern operating systems. • Experience with LINUX, FreeBSD, Centos and Windows OS Platforms. • Strong written and verbal communication skills, able to effectively and clearly communicate with both engineers and managers. • Programming experience in C • BS or M.S. degree in Computer Science, Computer Engineering or Electrical Engineering from an accredited college or technical institute CONTACT --------------------------------------------------- Please contact Stephen Zappia Email:[email protected] Direct Line:954-229-5621 Citrix Systems Inc. Stephen Zappia Senior Staffing Associate [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs