Information Security Analyst - Penetration Tester

Job Title: Information Security Analyst - Penetration Tester
Status: Full Time
Department: Security Operations
Reports To: Executive Vice President - Operations

VISA Support: NO

Summary of Responsibilities:

? Perform research, analysis and testing of computer/network vulnerabilities via vulnerability assessment, penetration test, war dialing or social engineering.

? Clearly outline and portray test findings via well documented reports. May deliver or participate in client briefings as needed.

? Assist clients with questions regarding vulnerabilities and the remediation efforts involved
in eliminating them.

? Review IDS and or firewall signature/rule sets and make recommendations for improvement.

? Perform other duties as assigned.

Position Requirements:

Required:

Bachelors Degree in Computer Science, Engineering, Information Systems or Physics or E-Commerce. Operational experience in computer/network security or systems administration can be substituted for formal education at a rate of 2 for 1.

Basic knowledge and understanding at the protocol level of TCP/IP, routing, DNS, SMTP,
FTP, HTTP required.

Experience utilizing vulnerability scanning tools, including NESSUS, NMAP and others.

Must be capable of working independently and as part of a dynamic team. Must have excellent writing skills and be able to convey ideas in a clear and concise manner.

Preferred:

? Prior penetration testing experience against both Windows and Unix based systems.

? Familiarity with commercial firewall and IDS technology. Experience in the architectural
analysis of networks.

? Fundamental understanding of Perl, C, C++ and shell scripting.

Pluses:

? Experience with enterprise wide risk assessments utilizing OCTAVE, NIST, STAR or NSA methodologies.

? CISSP, CISA certification

? Familiarity with different systems and software packages utilized by financial institutions.

Other:

All applicants must pass a background investigation to be considered for employment. All
applicants may be asked to pass a formal exam where they will be asked to conduct an assessment of a server or set of servers and develop and provide a formal report on their findings.

Other Benefits:

40 Hour Work Week
Flexible schedule
Relaxed Work Environment

DIGITAL DEFENSE, INC. IS AN EQUAL OPPORTUNITY EMPLOYER