[SJ-JOB] Penetration Engineer, San Francisco
[email protected] 18 Nov 2008 00:10:25 -0000
| Newsgroups | gmane.comp.security.jobs |
|---|---|
| Message-ID | <[email protected]> |
--------------------------------------------------- SECURITYFOCUS JOBS - NEW OPPORTUNITY --------------------------------------------------- JOB DESCRIPTION --------------------------------------------------- Position: Penetration Engineer Location: San Francisco, California, United States Type: Permanent F/T Closing Date: 2008-12-12 The National Incident Response Team (NIRT), a National Information Techno= logy Operation (NITO), for the Federal Reserve System delivers effective = and efficient national intrusion detection, incident response, security i= ntelligence, threat assessment, and vulnerability assessment services for= the Federal Reserve System. As a member of NIRT’s Information Secur= ity Assessment Team, you will interact with NIRT’s customers who are= located around the Federal Reserve System evaluating the security of the= ir information systems and applications. The primary area of responsibili= ty will be conducting information security assessments. This will include= running vulnerability assessment tools and performing infrastructure and= application penetration testing. =0D =0D =0D =0D Job Responsibilities:=0D =0D • Oversee and conduct vulnerability assessments and penetra= tion testing;=0D =0D • Oversee and perform the review and analysis of security v= ulnerability data to identify applicability and false positives;=0D =0D • Prepare and distribute security assessment reports to cus= tomers;=0D =0D • Research and develop testing tools, techniques, and proce= ss improvements=0D =0D • Performs additional incidental duties as assigned.=0D =0D JOB REQUIREMENTS --------------------------------------------------- Job Requirements:=0D =0D • Bachelor degree in Information Technology/Computer Scienc= e, or related disciplines and/or equivalent work experience;=0D =0D • Excellent analytical skills;=0D =0D • Excellent interpersonal, communication, organizational, a= nd project management skills;=0D =0D • Team player with excellent consultative and communication= skills, and the proven ability to work effectively with client, internal= management and staff, vendors and consultants; =0D =0D • Strong written and verbal communications skills;=0D =0D • Proven ability to communicate technical issues to technic= al and non-technical business area representatives.=0D =0D • Hands-on experience with commercial and open-source netwo= rk and application security testing tools=0D =0D • Experience testing web applications for common web applic= ation security vulnerabilities as defined by OWASP including input valida= tion vulnerabilities, broken access controls, session management vulnerab= ilities, cross-site scripting issues, SQL injection and web server config= uration issues=0D =0D • Application security source code and design review=0D =0D • Ability to travel;=0D =0D • Approximately 3-5 years of experience in the security asp= ects of multiple platforms, operating systems, software, communications, = and network protocols.=0D =0D • Ability to obtain US Security Clearance =0D =0D • CISSP certified or the ability to work towards obtaining = the certification. =0D =0D =0D =0D =0D Desired=0D =0D • Familiarity with application development (C, C++, .NET, J= AVA);=0D =0D • Script-writing skills (VB, perl, PHP);=0D =0D • Experience developing exploits.=0D =0D =0D =0D The Federal Reserve Bank of San Francisco is an Equal Opportunity Employe= r.=0D CONTACT --------------------------------------------------- To be considered for the position, please apply on-line at www.frbsf.org=0D =0D Please, no phone calls about this job! Federal Reserve Bank of San Francisco Phanmaly Somsanith Recruiter [email protected] --------------------------------------------------- SECURITYFOCUS JOBS --------------------------------------------------- SecurityFocus now offers an online interface for searching and managing job opportunities and resumes. http://www.securityfocus.com/jobs