Sr. Security Engineer, Hopkinton

[mitchell.schneir]

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Sr. Security Engineer
Location:       Hopkinton, Massachusetts, United States
Type:           Permanent F/T

Closing Date:   2008-08-17

GENERAL SUMMARY
This position is part of the EMC Product Security Office (PSO). In conjunction with customers and leaders of other EMC business units, the PSO defines and maintains EMC’s Product Security Policy. It also conducts security training for Engineers, and it implements the Security Development Lifecycle across engineering groups to ensure they deliver secure products. The PSO delivers the Common Security Platform and ensures consistent security product and technology adoption across EMC. Finally, the PSO coordinates product security certifications and, as needed, manages EMC’s responses to product security vulnerabilities.
Not only does the team help EMC to deliver secure information infrastructure offerings to customers, but it also supports EMC’s security thought leadership position by participating actively in industry groups such as SAFECode. The members of the PSO are committed to raising visibility in the marketplace for EMC and RSA Security solutions, and they work daily to tighten the association of security with the overall EMC brand  
 
PRINCIPAL DUTIES AND RESPONSIBILITIES
1.Has responsibility for the EMC Product Security Response Center (http://www.emc.com/contact-us/contact/product-security-response-center.htm). Perform analysis on the vulnerability reports as submitted by the finder and work with engineering organizations to verify the existence of the vulnerability.
2.Provide technical subject matter expertise on the vulnerabilities to help coordinate the management of remedy creation and publication to customers/ security researchers
3.Monitor third party component vulnerabilities on a daily basis and assess relevance of these to EMC products
4.Must be able to communicate the nature of the third party vulnerability, work with the various engineering organizations to determine the impact on EMC product(s)
5.Monitor industry trends on vulnerabilities and communicate these to EMC product organizations
6.Publish technical analysis on EMC product vulnerabilities and coordinate with internal resources to create a technical position statement on these for EMC product group consumption
7.Assist the engineering product groups in interpreting the results of vulnerability scanning tools such as Nessus, Foundstone, WebInspect etc.
8.Assist the Security Development Lifecycle team with the evaluation and roll-out of security testing strategy to EMC product organizations
9.Work on evaluating the security testing tools and provide technical subject matter expertise on these tools to EMC product organizations



JOB REQUIREMENTS
---------------------------------------------------
•Broad knowledge of all aspects of information security. Industry certifications: GIAC, CISA and/or CISSP preferred
•Ability to lead, motivate and direct a workgroup
•Ability to work in a high-pressure environment
•Ability to prioritize projects and deliverables
•Cross-Functional skill
•Consultative skills
•Possesses strong product/technology/industry knowledge
•Results driven



CONTACT
---------------------------------------------------
Submit resume for the position at https://sjobs.brassring.com/1033/ASP/TG/cim_jobdetail.asp?SID=^6MOLHdRq9vE2km0wa4ipDDSe000IXLIE8OnFCKBz3jyuQQvV3YJKNS5agz3Dz3GuD8EjBuQljlCI_C_R__L_F_29Cg/yjOvOTRZB9XtwSoEkhLf5bxLoo=&jobId=158441&type=search&JobReqLang=1&recordstart=1&JobSiteId=5109&JobSiteInfo=158441_5109&GQId=0

or, search for job ID 35051BR at https://sjobs.brassring.com/1033/ASP/TG/cim_home.asp?partnerid=20085&siteid=5109 and submit resume through the online system.

EMC/ RSA
Mitch Schneir

mitchell.schneir@...



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.securityfocus.com/jobs