[SJ-JOB] Security Consultant, San Francisco

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Security Consultant
Location:       San Francisco, California, United States
Type:           Permanent F/T

Closing Date:   2008-12-12

The National Incident Response Team (NIRT), a National Information Techno=
logy Operation (NITO), for the Federal Reserve System delivers effective =
and efficient national intrusion detection, incident response, security i=
ntelligence, threat assessment, and vulnerability assessment services for=
 the Federal Reserve System. As a member of NIRT’s Information Secur=
ity Assessment Team, you will interact with NIRT’s customers who are=
 located around the Federal Reserve System evaluating the security of the=
ir information systems and applications. The primary areas of responsibil=
ity include overseeing, coordinating and performing information security =
assessment activities. The ideal candidate will have the ability to blend=
 technical, organizational, business, and information security skill sets=
 and knowledge. This means scoping and coordinating the assessments in ad=
dition to performing both high-level assessment analysis translating tech=
nical vulnerabilities into business risk and low-level assessment work su=
ch as running vulnerability assessment tools and conducting ethical hacki=
ng. =0D
=0D
 =0D
=0D
Job Responsibilities:=0D
=0D
·         Develop understanding and serve as liaison to business a=
reas;=0D
=0D
·         Coordinate security assessments with business areas;=0D
=0D
·         Oversee and conduct vulnerability assessments and penetr=
ation testing;=0D
=0D
·         Oversee and perform the review and analysis of security =
vulnerability data to identify applicability and false positives;=0D
=0D
·         Prepare and distribute security assessment reports to cu=
stomers;=0D
=0D
·         Assist in the selection and tailoring of approaches, met=
hods and tools to support service offering;=0D
=0D
·         Perform additional incidental duties as assigned.=0D
=0D



JOB REQUIREMENTS
---------------------------------------------------
Job Requirements:=0D
=0D
·         Bachelor degree in Information Technology/Computer Scien=
ce, or related disciplines and/or equivalent work experience;=0D
=0D
·         Demonstrated ability to work on multiple projects simult=
aneously and to work in a highly dynamic, rapidly changing environment; =0D
=0D
·         Excellent analytical skills;=0D
=0D
·         Excellent interpersonal, communication, organizational, =
and project management skills;=0D
=0D
·         Team player with excellent consultative and communicatio=
n skills, and the proven ability to work effectively with client, interna=
l management and staff, vendors and consultants; =0D
=0D
·         Strong written and verbal communications skills;=0D
=0D
·         Proven ability to communicate technical issues to techni=
cal and non-technical business area representatives;=0D
=0D
·         Hands-on experience with commercial and open-source netw=
ork and application security testing tools;=0D
=0D
·         Experience testing web applications for common web appli=
cation security vulnerabilities as defined by OWASP including input valid=
ation vulnerabilities, broken access controls, session management vulnera=
bilities, cross-site scripting issues, SQL injection and web server confi=
guration issues;=0D
=0D
·         Ability to travel;=0D
=0D
·         Approximately 3-5 years of experience in the security as=
pects of multiple platforms, operating systems, software, communications,=
 and network protocols;=0D
=0D
·         Ability to obtain US Security Clearance;=0D
=0D
·         CISSP certified or the ability to work towards obtaining=
 the certification. =0D
=0D
 =0D
=0D
 =0D
=0D
Desired=0D
=0D
·         Knowledge of the roles and responsibilities of the Feder=
al Reserve’s IT organizations, National Information Technology Opera=
tions (NITOs), and other System support organizations; =0D
=0D
·         Broad understanding of information technology and inform=
ation security; =0D
=0D
·         Broad understanding of the Federal Reserve System’s=
 businesses and business goals;=0D
=0D
·         Familiarity with FISMA, FIPS, the NIST 800 series.=0D
=0D



CONTACT
---------------------------------------------------
To be considered for the position, please apply on-line at www.frbsf.org=0D
=0D
Please, no phone calls about this job!

Federal Reserve Bank of San Francisco
Phanmaly Somsanith
Recruiter
[email protected]



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs