White hat Hacker Security engineer needed

Profile

Responsibilities include identifying technical security vulnerabilities utilizing best of breed vulnerability scanners, application analysis tools and ethical hacking techniques. Will assist team members conducting application analysis, network analysis, and debugging; reporting security vulnerabilities and the risks those vulnerabilities present to Vice Presidents, Managers, and other technical individuals; and recommending mitigating solutions to remediate risk associated with vulnerabilities.
JOB REQUIREMENTS:
1) At least 4 years IT security or equivalent work experience.
2) Knowledge of the following: computer architecture, operating systems, inter-process communications, networking protocols and their related implementations, database systems, web servers, application servers and different types of middle-ware.
2) Experience with and understanding of compiled and interpreted programs and the types of security issues possible in each.
3) Experience with manual source code reviews for security vulnerabilities (e.g. SANS Top 25 Most Dangerous Software Errors, OWASP top ten).
4) Both white box and black box penetration testing experience, including detection, verification and exploitation of security vulnerabilities.
5) Experience with debuggers, application analysis tools, vulnerability scanners and web application proxies (e.g. Nessus, Nexpose, Metasploit, Appscan, burpsuite).
6) Excellent verbal communications skills and concise written communication skills.
7) Excellent organization and multi-tasking skills.
8) Ability to work both independently and as part of a team.
PREFERRED JOB REQUIREMENTS:
Experience assessing security risk associated with enterprise solutions.
Bachelor Degree in Computer Science or equivalent
Previous experience with application development.
Profession Security Certifications is a plus: e.g. MCSE, RHCE, CCNA, CCIE, CISM, CISA, OSCE, CISSP. Responsibilities include identifying technical security vulnerabilities utilizing best of breed vulnerability scanners, application analysis tools and ethical hacking techniques. Will assist team members conducting application analysis, network analysis, and debugging; reporting security vulnerabilities and the risks those vulnerabilities present to Vice Presidents, Managers, and other technical individuals; and recommending mitigating solutions to remediate risk associated with vulnerabilities.
The risk assessment tasks to be executed include:
Scope Phase:
· Kick-off Meeting
· Information Gathering and Review
· Formal Scope Preparation captured in a Statement of Work
·
Analysis Phase:
· Network Enumeration
· Vulnerability Scanning
· Dynamic Program Analysis
· Architecture Review
· Configuration Review
· Application Review
· Source Code Review
· Reverse Code Engineering
· Vulnerability Data Review
· Manual Penetration Testing
Reporting and Delivery
· Deliverable Generation (report, demos, presentation)
· Delivery to IS Management, ITG Owners, Business Customer, and CASSIP
Ed Keibler
OMT Consultants, LLC
PO Box 941812
Atlanta, GA 31141
****
Web: ****

Company info

Sign Up Now - WashingtondcCrossing.com