Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
 
Location
Country: Russian Federation
State/Prov:
City: Moscow/St Petersburg or Home Working
Position
Position/Title: Security Engineer
Position Type: Permanent F/T
Closing Date: 2008-10-27
Job Description: In line with the global security strategy, he will define, monitor & audit security standards within the company. As part of the core security team, he will Investigate and Coordinate response to significant security events. Provide IT Security expertise internally and developp adequate security measures to prevent and handle attacks against information systems. Define policies & procedures, and communicate toward IT administrators to maintain security standards, and ensure adequate IT security levels are applied worldwide.
Job Requirements: Required Skills:

----------------

- Information Security knowledge : Threats & Vulnerabilities, Risk assessment & mitigation, Security Policy, Security Management process

- Linux systems: OS hardening, Scripting (shell, Perl, python), Servers & DB administration (Apache, MySQL, samba, ftp, ssh…)

- Windows systems: OS architecture and administration (registry, strategies…)

- Network : TCP/IP, Ethernet, WAN, infrastructure administration (router, switch, Wi-Fi, VPN...), protocols (snmp, dns, SSL/TLS, …), packet filtering (iptables / pcap…)

- Servers : Windows server, Unix/Linux, Virtualization (Vmware, Xen,…), SAN, Cluster, Load balancing, distributed C/S architecture, monitoring tools (Nagios, OpenView, …)

- Security infrastructure : Firewall (Checkpoint, IPtables…), IDS/IPS (Snort, Prelude, ...), Scanners (Qualys, Nmap, Nessus …), Antivirus/spam/malware (Symantec, ClamAV,…)

- Knowledge in Telephony (VOIP, SIP, QSig,…) and mobility (PDA / Blackberry, RAS,…)

- Security audit & alert: pen test tool (BackTrack…), log analyses, incident detection and management process (syslog, alerts, forensic analyses…), Honeypots (nepenthes, honeytrap, ….)

- User access control : Windows 2003 domains, AD/LDAP/Kerberos, SSO, reverse proxying, Identity access management

- Identify new security vulnerabilities, virus proliferation trend and perform corrective actions (payload, hex analysis, …)

- In general, open source technologies skills would be appreciated

Education/Others:

-----------------

- A Bachelor of Science degree in Computer Science, IT Engineering or other related disciplines or strongly and justified autodidact

- Good English level

- Self organization capacity (security survey, project management, reporting) and rigourous method (PDCA methodology)

- Good Presentation and Communication skills (enjoy interacting with people of all levels in a multicultural environment)

Appreciated (not mandatory) skills:

-----------------------------------

- CISSP, ISO 27001 certified, ITIL, ethical hacking

- Microsoft certification

- French language

- Open source contributor

Travel:

-------

Regular in Europe, with 2 or 3 intercontinental travels per year.

Experience:

-----------

Minimum 3-5 years of experience specialized in the area of Network & Systems Security Policy, Control and Vulnerability Testing
Contact Information
Contact Directions: Mr Vincent Jaussaud, APC by Schneider Electric Chief Security Officer

Tel: +33 4 76 18 32 19
Company: American Power Conversion (APC)
First Name: Vincent
Last Name: Jaussaud
Title: Chief Security Officer
Email: Vincent.Jaussaud (at) mgeups (dot) com [email concealed]

 







 

Privacy Statement
Copyright 2008, SecurityFocus