CompuCom is the leading IT outsourcing / consulting company seeking a MicroStrategy expert for reports development on a contract basis.
Responsibilities include:
Developing stand alone and drill through reporting functionality from scratch as well as converting from existing reporting functionality
Developing and employing all the widget and graphing functionality available within the MicroStrategy tool
Developing functionality to schedule delivery of the reports via email, reporting portal as well as handheld devices
Assisting in the scheduling of report delivery
Assisting in the setup of ETL dependencies within MicroStrategy to ensure reports are using/showing recent data
Developing cutting-edge graphing functionality like employing slider bars for trending as well as pie, bar, line, scatter and thermal-type graphs
Assisting with the maintenance of the security access at all levels of the MicroStrategy tool
Writing SQL queries to test results of relationships, developing reports based on that SQL and then comparing the content of the reports to the raw data
Developing reporting solutions based on existing SQL provided to them - some reports may be built with little input as to final design so experience in developing solutions from limited specifications will be a major component of the Developer's responsibilities
Experience: Minimum 5 years of extensive experience in designing and developing graphic and drill down/through MicroStrategy reporting functionality for a Data Warehouse environment
Must have heavy graphing experience employing all/most of the MicroStrategy widgets/tools
Must have experience developing MicroStrategy reporting solutions in a Data Warehouse environment Must understand principles of developing reporting solutions using STAR schemas as well as unconventional/ODS schemas
Must have experience with all the scheduling aspect of the MicroStrategy tool
Must have experience working with the security setup and maintenance at all levels within the MicroStrategy tool
Must have strong SQL skills (Oracle 10g) and be able to construct and deconstruct complex SQL queries
Must have experience in full life cycle development - from analysis of reporting needs with users, designing potential solutions, coding all aspects of reports including graphs, drill down/through and implementing final product into production
Must have experience documenting reporting solutions - new and existing
Experience with MicroStrategy Version 9.0 required
Excellent communication and interpersonal skills requiredBONUS SKILLS:
Knowledge of architectural frameworks and data warehouse methodologies
Experience in designing STAR schemas
Experience/knowledge on MicroStrategy Architecture
Experience/knowledge on maintaining a reporting metadata layer
Experience in setting up security for enterprise-wide environment from within MicroStrategy
Solution architecture experience including hands-on design of analytical layer and MicroStrategy Schema
To apply: http://www.gadball.com/job/20063913/microstrategy-developer/?sid=18
Wednesday, March 24, 2010
Remedy Developer in Dallas, TX
Affiliated Computer Services, Inc. (ACS) is expertise in action™. We are a FORTUNE 500 company with 74,000 employees worldwide supporting client operations reaching more than 100 countries. We provide business process outsourcing and information technology solutions to world-class commercial and government clients. Our employees operate with integrity, and are flexible, reliable and responsive.
If you meet the requirements of this position and want to work for a world-class company with a great marketplace reputation, apply today.
All other duties as assigned.
May perform one or more of the following:
This position is responsible for the implementation and enhancement of the Remedy ITSM application.This includes working with business analysts and customers to design, configure, and integrate the Remedy application.The ideal candidate will have 5+ years development experience including experience in a CMMI level 3+ organizations.Position level is dependent on candidate’s level of experience.
Primary Experience:
2+ years Remedy or ServiceCenter design, development (forms, active links and filters) , configuration, and integration
5+ years structured analysis and design
Good understanding of ITIL Service Management processes
Demonstrated analytical thinking, adaptability, enthusiasm and motivation.
Ability to work independently as well as in a team setting
Strong organizational, verbal, and written communication skills
Secondary Experience:
Test plan development
Experience with SQL, stored procedures, and triggers
Remedy Mid-Tier and Remedy Web Services experience.
Experience with COTS package implementations, 4GL languages and IDE
Data analysis/Data modeling experience
Change Control, version control, build, and configuration management
XML, JAVA
Education:
Bachelor's Degree in Computer Science or Business Administration or related discipline.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: See job description
To apply: http://www.gadball.com/job/20058998/remedy-developer/?sid=18
If you meet the requirements of this position and want to work for a world-class company with a great marketplace reputation, apply today.
All other duties as assigned.
May perform one or more of the following:
This position is responsible for the implementation and enhancement of the Remedy ITSM application.This includes working with business analysts and customers to design, configure, and integrate the Remedy application.The ideal candidate will have 5+ years development experience including experience in a CMMI level 3+ organizations.Position level is dependent on candidate’s level of experience.
Primary Experience:
2+ years Remedy or ServiceCenter design, development (forms, active links and filters) , configuration, and integration
5+ years structured analysis and design
Good understanding of ITIL Service Management processes
Demonstrated analytical thinking, adaptability, enthusiasm and motivation.
Ability to work independently as well as in a team setting
Strong organizational, verbal, and written communication skills
Secondary Experience:
Test plan development
Experience with SQL, stored procedures, and triggers
Remedy Mid-Tier and Remedy Web Services experience.
Experience with COTS package implementations, 4GL languages and IDE
Data analysis/Data modeling experience
Change Control, version control, build, and configuration management
XML, JAVA
Education:
Bachelor's Degree in Computer Science or Business Administration or related discipline.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: See job description
To apply: http://www.gadball.com/job/20058998/remedy-developer/?sid=18
Security Analyst in Dallas, TX
Affiliated Computer Services, Inc. (ACS) is expertise in action™. We are a FORTUNE 500 company with 74,000 employees worldwide supporting client operations reaching more than 100 countries. We provide business process outsourcing and information technology solutions to world-class commercial and government clients. Our employees operate with integrity, and are flexible, reliable and responsive.
We are looking for a Security Operations Center Analyst who has 3+ years experience supporting first level IDS monitoring, analysis, and incident response for information security alert events.
Other Requirements:
Candidate must have strong written and oral communication skills.
Candidate must be a team player with demonstrated initiative to work without constant guidance.
Candidate must have an intermediate understanding of host/network common vulnerabilities and exploits (CVEs), hacker methodologies and tactics, and the tools used.
Ideal candidate willhave an intermediate understanding of and experienced in the use of tools such as Trace Route, Visual Route, Ethereal, Nessus, know how to perform packet captures, TCPDumps and the use and function of other commonly used security tools.
Candidate must have an intermediate understanding of the TCP/IP protocol suite, TCP/IP headers and packets, the OSI model, and commonly used TCP/UDP ports and associated services.
Candidate must have an understanding of routing protocols, switching, etc.
Candidate must have experience with host platform vulnerability assessment and hardening standards and methodologies.
Candidate must have an intermediate knowledge common routing and switching CLI commands
Candidate must have an understanding of common OS and domain structures (WindowsNT, 2000 Active Directory, etc.), servers, services, and associated vulnerabilities.
Desired Skills/Abilities:
Previous employment in a SOC, CSIRT, or on a Security Response Team employed in the capacity as a Level I/II Analyst is preferable.
Candidate should have experience with event monitoring and analysis of events presented on a Security Information Management/Event Management System (SIM/SEM) – preferably RSA enVision.
Candidate should have an intermediate understanding of and experience with the monitoring and the analysis of Firewall logs, router logs, syslogs, and network/host-based Intrusion Detection/ Prevention systems (IDS/IPS), SNORT is preferred.
Candidate should have experience with the tuning of IDS/IPS, firewall ACL’s and rule sets.
Candidate should have experience with VLANs, SPANs and RSPANs on network devices.
Candidate should have experience with Linux, Red Hat, etc. hosts, operating systems, and applications.
It is preferable that candidate have previousIT Security/Information training through such sources as SANS, etc.
Preference for certification: MSCE, RSA enVison training, CCNA and SSIM training, etc
Education Requirements
Bachelor’s degree in a related field, or equivalent work experience.
Years of Experience Required
· Minimum of 5-10 years of related technical support experience
· 5+ years of experience with TCP/IP based technologies and protocols
Experience with regulatory compliance laws and business drivers including SOX, HIPAA, GLBA, PCI, and others.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: • Candidate must have strong written and oral communication skills.
• Candidate must be a team player with demonstrated initiative to work without constant guidance.
• Candidate must have an intermediate understanding of host/network common vulnerabilities and exploits (CVEs), hacker methodologies and tactics, and the tools used.
• Ideal candidate will have an intermediate understanding of and experienced in the use of tools such as Trace Route, Visual Route, Ethereal, Nessus, know how to perform packet captures, TCPDumps and the use and function of other commonly used security tools.
• Candidate must have an intermediate understanding of the TCP/IP protocol suite, TCP/IP headers and packets, the OSI model, and commonly used TCP/UDP ports and associated services.
• Candidate must have an understanding of routing protocols, switching, etc.
• Candidate must have experience with host platform vulnerability assessment and hardening standards and methodologies.
• Candidate must have an intermediate knowledge common routing and switching CLI commands
• Candidate must have an understanding of common OS and domain structures (WindowsNT, 2000 Active Directory, etc.), servers, services, and associated vulnerabilities.
Desired Skills/Abilities:
• Previous employment in a SOC, CSIRT, or on a Security Response Team employed in the capacity as a Level I/II Analyst is preferable.
• Candidate should have experience with event monitoring and analysis of events presented on a Security Information Management/Event Management System (SIM/SEM) – preferably RSA enVision.
• Candidate should have an intermediate understanding of and experience with the monitoring and the analysis of Firewall logs, router logs, syslogs, and network/host-based Intrusion Detection/ Prevention systems (IDS/IPS), SNORT is preferred.
• Candidate should have experience with the tuning of IDS/IPS, firewall ACL’s and rule sets.
• Candidate should have experience with VLANs, SPANs and RSPANs on network devices.
• Candidate should have experience with Linux, Red Hat, etc. hosts, operating systems, and applications.
• It is preferable that candidate have previous IT Security/Information training through such sources as SANS, etc.
• Preference for certification: MSCE, RSA enVison training, CCNA and SSIM training, etc
To apply: http://www.gadball.com/job/20061211/security-analyst/?sid=18
We are looking for a Security Operations Center Analyst who has 3+ years experience supporting first level IDS monitoring, analysis, and incident response for information security alert events.
Other Requirements:
Candidate must have strong written and oral communication skills.
Candidate must be a team player with demonstrated initiative to work without constant guidance.
Candidate must have an intermediate understanding of host/network common vulnerabilities and exploits (CVEs), hacker methodologies and tactics, and the tools used.
Ideal candidate willhave an intermediate understanding of and experienced in the use of tools such as Trace Route, Visual Route, Ethereal, Nessus, know how to perform packet captures, TCPDumps and the use and function of other commonly used security tools.
Candidate must have an intermediate understanding of the TCP/IP protocol suite, TCP/IP headers and packets, the OSI model, and commonly used TCP/UDP ports and associated services.
Candidate must have an understanding of routing protocols, switching, etc.
Candidate must have experience with host platform vulnerability assessment and hardening standards and methodologies.
Candidate must have an intermediate knowledge common routing and switching CLI commands
Candidate must have an understanding of common OS and domain structures (WindowsNT, 2000 Active Directory, etc.), servers, services, and associated vulnerabilities.
Desired Skills/Abilities:
Previous employment in a SOC, CSIRT, or on a Security Response Team employed in the capacity as a Level I/II Analyst is preferable.
Candidate should have experience with event monitoring and analysis of events presented on a Security Information Management/Event Management System (SIM/SEM) – preferably RSA enVision.
Candidate should have an intermediate understanding of and experience with the monitoring and the analysis of Firewall logs, router logs, syslogs, and network/host-based Intrusion Detection/ Prevention systems (IDS/IPS), SNORT is preferred.
Candidate should have experience with the tuning of IDS/IPS, firewall ACL’s and rule sets.
Candidate should have experience with VLANs, SPANs and RSPANs on network devices.
Candidate should have experience with Linux, Red Hat, etc. hosts, operating systems, and applications.
It is preferable that candidate have previousIT Security/Information training through such sources as SANS, etc.
Preference for certification: MSCE, RSA enVison training, CCNA and SSIM training, etc
Education Requirements
Bachelor’s degree in a related field, or equivalent work experience.
Years of Experience Required
· Minimum of 5-10 years of related technical support experience
· 5+ years of experience with TCP/IP based technologies and protocols
Experience with regulatory compliance laws and business drivers including SOX, HIPAA, GLBA, PCI, and others.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: • Candidate must have strong written and oral communication skills.
• Candidate must be a team player with demonstrated initiative to work without constant guidance.
• Candidate must have an intermediate understanding of host/network common vulnerabilities and exploits (CVEs), hacker methodologies and tactics, and the tools used.
• Ideal candidate will have an intermediate understanding of and experienced in the use of tools such as Trace Route, Visual Route, Ethereal, Nessus, know how to perform packet captures, TCPDumps and the use and function of other commonly used security tools.
• Candidate must have an intermediate understanding of the TCP/IP protocol suite, TCP/IP headers and packets, the OSI model, and commonly used TCP/UDP ports and associated services.
• Candidate must have an understanding of routing protocols, switching, etc.
• Candidate must have experience with host platform vulnerability assessment and hardening standards and methodologies.
• Candidate must have an intermediate knowledge common routing and switching CLI commands
• Candidate must have an understanding of common OS and domain structures (WindowsNT, 2000 Active Directory, etc.), servers, services, and associated vulnerabilities.
Desired Skills/Abilities:
• Previous employment in a SOC, CSIRT, or on a Security Response Team employed in the capacity as a Level I/II Analyst is preferable.
• Candidate should have experience with event monitoring and analysis of events presented on a Security Information Management/Event Management System (SIM/SEM) – preferably RSA enVision.
• Candidate should have an intermediate understanding of and experience with the monitoring and the analysis of Firewall logs, router logs, syslogs, and network/host-based Intrusion Detection/ Prevention systems (IDS/IPS), SNORT is preferred.
• Candidate should have experience with the tuning of IDS/IPS, firewall ACL’s and rule sets.
• Candidate should have experience with VLANs, SPANs and RSPANs on network devices.
• Candidate should have experience with Linux, Red Hat, etc. hosts, operating systems, and applications.
• It is preferable that candidate have previous IT Security/Information training through such sources as SANS, etc.
• Preference for certification: MSCE, RSA enVison training, CCNA and SSIM training, etc
To apply: http://www.gadball.com/job/20061211/security-analyst/?sid=18
Intrusion Detection Engineer in Dallas, TX
Affiliated Computer Services, Inc. (ACS) is expertise in action™. We are a FORTUNE 500 company with 74,000 employees worldwide supporting client operations reaching more than 100 countries. We provide business process outsourcing and information technology solutions to world-class commercial and government clients. Our employees operate with integrity, and are flexible, reliable and responsive. If you meet the requirements of this position and want to work for a world-class company with a great marketplace reputation, apply today.
A senior-level technical expert, the Information Security Principal is a fully qualified individual contributor who applies an advanced knowledge of information security services/analysis concepts, practices and procedures. This position is responsible for research, design, development, deployment, configuration, administration, and maintenance of an enterprise-wide Intrusion Detection System (IDS), Intrusion Prevention System (IPS) and Security Information/Event Management (SIEM) infrastructure.
Candidate should be competent to work on the most complex assignments and perform a comprehensive range of information security services operations activities. The candidate should be able to routinely work under demanding deadlines and often handle heavy workloads, operating with only limited supervision
The candidate also needs to possess knowledge in vulnerability scanning and penetration testing. Experience with McAfee Intrushield and Sourcefire/Snort is a plus.
Specific responsibilities include:
- initial IDS design/deployment
- daily IDS analysis/monitoring and generating technical and executive summary reports
- incident response
- development of standard operating procedures and other technical documentation for the IDS/SIEM infrastructure
- provides functional guidance to less experienced staff.
Other Responsibilities:
Provides functional and specific technical expertise to formulate advanced project scope and objectives; develops and modifies procedures to address information security services issues/problems.
Performs comprehensive analyses of existing solutions to incorporate requested enhancements.
Performs reviews/analyses of requested changes for equipment, technology and/or other factors/trends, which may impact existing solution consistent with solution modifications.
Consults with hardware, communications, database experts and /or vendors to ensure system viability.
Performs advanced system design functions, including interpretive analyses, chart preparation and associated diagrams/enhancement plans.
Prepares/conducts the most advanced acceptance test plans and confirms accompanying results, including the development and interpretation of data sampling plans.
Ensures applicable documentation is updated according to client/ACS standards; may assist in user training.
Participates in marketing presentations where solution requires functional/technical input; assists in research efforts and/or provide input to proposals.
Stays abreast of developments in field of expertise to ensure knowledge base remains current.
Routinely provides guidance to and assists in the training of less experienced staff.
Works under general direction, within the parameters of company policies and procedures.
MINIMUM REQUIREMENTS:
Minimum of 7 years of overall security engineering/administration experience required.
At least 2 years of experience in design/development of Network Intrusion Detection Systems (NIDS) and IDS analysis.
Minimum 3 years experience in network security analysis/administration, knowledge of Linux, Windows and network equipment Industry Security Certifications and Programming experience are a plus.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
All other duties as assigned.
Experience: Same as above
To apply: http://www.gadball.com/job/20061208/intrusion-detection-engineer/?sid=18
A senior-level technical expert, the Information Security Principal is a fully qualified individual contributor who applies an advanced knowledge of information security services/analysis concepts, practices and procedures. This position is responsible for research, design, development, deployment, configuration, administration, and maintenance of an enterprise-wide Intrusion Detection System (IDS), Intrusion Prevention System (IPS) and Security Information/Event Management (SIEM) infrastructure.
Candidate should be competent to work on the most complex assignments and perform a comprehensive range of information security services operations activities. The candidate should be able to routinely work under demanding deadlines and often handle heavy workloads, operating with only limited supervision
The candidate also needs to possess knowledge in vulnerability scanning and penetration testing. Experience with McAfee Intrushield and Sourcefire/Snort is a plus.
Specific responsibilities include:
- initial IDS design/deployment
- daily IDS analysis/monitoring and generating technical and executive summary reports
- incident response
- development of standard operating procedures and other technical documentation for the IDS/SIEM infrastructure
- provides functional guidance to less experienced staff.
Other Responsibilities:
Provides functional and specific technical expertise to formulate advanced project scope and objectives; develops and modifies procedures to address information security services issues/problems.
Performs comprehensive analyses of existing solutions to incorporate requested enhancements.
Performs reviews/analyses of requested changes for equipment, technology and/or other factors/trends, which may impact existing solution consistent with solution modifications.
Consults with hardware, communications, database experts and /or vendors to ensure system viability.
Performs advanced system design functions, including interpretive analyses, chart preparation and associated diagrams/enhancement plans.
Prepares/conducts the most advanced acceptance test plans and confirms accompanying results, including the development and interpretation of data sampling plans.
Ensures applicable documentation is updated according to client/ACS standards; may assist in user training.
Participates in marketing presentations where solution requires functional/technical input; assists in research efforts and/or provide input to proposals.
Stays abreast of developments in field of expertise to ensure knowledge base remains current.
Routinely provides guidance to and assists in the training of less experienced staff.
Works under general direction, within the parameters of company policies and procedures.
MINIMUM REQUIREMENTS:
Minimum of 7 years of overall security engineering/administration experience required.
At least 2 years of experience in design/development of Network Intrusion Detection Systems (NIDS) and IDS analysis.
Minimum 3 years experience in network security analysis/administration, knowledge of Linux, Windows and network equipment Industry Security Certifications and Programming experience are a plus.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
All other duties as assigned.
Experience: Same as above
To apply: http://www.gadball.com/job/20061208/intrusion-detection-engineer/?sid=18
Maximo CMMS Specialist in Dallas, TX
This is an excellent long-term opportunity for a CMMS Specialist to support our large Energy/Utility client. You will function as an administrator of the Maximo CMMS system and be a subject matter expert to resolve usability issues, address technical questions, and maximize the system potential. Provide ownership and maintain standard job procedures within the CMMS and associated processes and report them to departmental personnel to define opportunities and drive continuous improvement in maintenance. Provide quality service for internal and external customers by working with the Reliability Optimization Development Team, providing necessary information from the CMMS database. Enter all pertinent information into the CMMS system including updates to PM's and Equipment information. Be able to support a flexible work schedule that includes overtime, shift changes, and emergency call-in. 5+ years experience working in a Maintenance CMMS capacity, preferably within a regulated industry is needed. Experience with Maximo is desired. Ability to coordinate and plan procedure revisions, upgrades, new development, and verification/validation processes within required time limits. Experience working in a Demonstrated strong problem solving with technical research skills and the ability to manage heavy workloads and competing priorities is essential. Experience evaluating and interpreting standards, directives, and regulations with basic knowledge of manufacturer's documentation and specifications are needed.
To apply: http://www.gadball.com/job/20059844/maximo-cmms-specialist/?sid=18
To apply: http://www.gadball.com/job/20059844/maximo-cmms-specialist/?sid=18
Security Engineer in Dallas, TX
Affiliated Computer Services, Inc. (ACS) is expertise in action™. We are a FORTUNE 500 company with 74,000 employees worldwide supporting client operations reaching more than 100 countries. We provide business process outsourcing and information technology solutions to world-class commercial and government clients. Our employees operate with integrity, and are flexible, reliable and responsive. If you meet the requirements of this position and want to work for a world-class company with a great marketplace reputation, apply today.
A senior-level technical expert, the Information Security Principal is a fully qualified individual contributor who applies an advanced knowledge of information security services/analysis concepts, practices and procedures. Incumbents are competent to work on the most complex assignments and perform a comprehensive range of information security services operations activities. The incumbent routinely works under demanding deadlines and often handles heavy workloads, operating with only limited supervision; errors at this level can cause significant delay, expense and/or disruption. Provide functional guidance to less experienced staff.
Provides functional and technical expertise to develop strategy and roadmap for conducting application penetration testing and source code analysis / review on web based applications and other custom developed applications; work across all relevant functional organizations to coordinate and implement penetration and application sources code testing strategies, actively engage in application penetration testing for ACS and our clients. Provide security consultation to project stakeholders and clients regarding configurations and solutions to mitigate risks identified during the application security design reviews and penetration testing. Assignments are in technical and business functional areas.
Responsibilities include:
Conduct ethical hacking and targeted penetration testing on public and non-public facing applications.
Conduct manual and automated black-box application assessment procedures using commercial penetration and auditing tools such as Tenable s Nessus, Core Impact, Retina, WebInspect, and AppDetective; as well as open source tools such as Nmap, Nikto, Paros, Burp, and Metasploit.
Recommend and ensure implementation of security safeguards to ACS and our clients for applications and networks. Security safeguards should be in accordance with industry standards, generally accepted business practices and other best practices.
Recommend security controls to system designs, databases and applications in accordance with industry best practices, standards including OWASP, NIST SP 800, FISMA, PCI, etc. Verify recommended security controls were implemented in the final solution by performing security assessment of solution.
Clearly document and communicate findings, risk description, risk level, and recommended solutions to stakeholders.
Research industry trends, products, and vendors.
Required Experience:
The incumbent also needs to have significant expertise in vulnerability scanning and penetration testing experience. Additionally, candidate should have working knowledge and experience in secure coding.
Candidates must be well versed in performing assessments and testing coupled with researching exploits and vulnerabilities, reading security community sites and blogs, and experimenting with and writing exploits.
The candidate should be a self-starter who is highly motivated and willing to learn a constantly evolving skill set.
Candidate should have a strong understanding of application security program, including system development lifecycle integration.
Candidate should have at least 4 years of experience performing penetration testing of web applications and their associated platforms (e.g. J2EE, .NET, IIS, Apache, Webshpere, etc.).
Candidate should possess an in-depth understanding of ethical penetration test methodologies and best practices.
Candidate should have excellent verbal and writing skills as well as the ability to write clear and concise assessment reports.
Candidate should have experience working with commercial penetration testing and auditing tools such as Tenable s Nessus, Core Impact, Retina, WebInspect, and AppDetective; as well as open source tools such as Nmap, Nikto, Paros, Burp, and Metasploit.
Candidate should have experience working with software programming languages and working with different scripting languages such as PERL and Python C++, C#, .Net, ActiveX and Java programming experience is desirable.
Required Education:
Bachelor's degree in Information Technology or related field or equivalent and 4+ years of related experience, plus 2-3 working in the cyber security field.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: see above.
To apply: http://www.gadball.com/job/20061210/security-engineer/?sid=18
A senior-level technical expert, the Information Security Principal is a fully qualified individual contributor who applies an advanced knowledge of information security services/analysis concepts, practices and procedures. Incumbents are competent to work on the most complex assignments and perform a comprehensive range of information security services operations activities. The incumbent routinely works under demanding deadlines and often handles heavy workloads, operating with only limited supervision; errors at this level can cause significant delay, expense and/or disruption. Provide functional guidance to less experienced staff.
Provides functional and technical expertise to develop strategy and roadmap for conducting application penetration testing and source code analysis / review on web based applications and other custom developed applications; work across all relevant functional organizations to coordinate and implement penetration and application sources code testing strategies, actively engage in application penetration testing for ACS and our clients. Provide security consultation to project stakeholders and clients regarding configurations and solutions to mitigate risks identified during the application security design reviews and penetration testing. Assignments are in technical and business functional areas.
Responsibilities include:
Conduct ethical hacking and targeted penetration testing on public and non-public facing applications.
Conduct manual and automated black-box application assessment procedures using commercial penetration and auditing tools such as Tenable s Nessus, Core Impact, Retina, WebInspect, and AppDetective; as well as open source tools such as Nmap, Nikto, Paros, Burp, and Metasploit.
Recommend and ensure implementation of security safeguards to ACS and our clients for applications and networks. Security safeguards should be in accordance with industry standards, generally accepted business practices and other best practices.
Recommend security controls to system designs, databases and applications in accordance with industry best practices, standards including OWASP, NIST SP 800, FISMA, PCI, etc. Verify recommended security controls were implemented in the final solution by performing security assessment of solution.
Clearly document and communicate findings, risk description, risk level, and recommended solutions to stakeholders.
Research industry trends, products, and vendors.
Required Experience:
The incumbent also needs to have significant expertise in vulnerability scanning and penetration testing experience. Additionally, candidate should have working knowledge and experience in secure coding.
Candidates must be well versed in performing assessments and testing coupled with researching exploits and vulnerabilities, reading security community sites and blogs, and experimenting with and writing exploits.
The candidate should be a self-starter who is highly motivated and willing to learn a constantly evolving skill set.
Candidate should have a strong understanding of application security program, including system development lifecycle integration.
Candidate should have at least 4 years of experience performing penetration testing of web applications and their associated platforms (e.g. J2EE, .NET, IIS, Apache, Webshpere, etc.).
Candidate should possess an in-depth understanding of ethical penetration test methodologies and best practices.
Candidate should have excellent verbal and writing skills as well as the ability to write clear and concise assessment reports.
Candidate should have experience working with commercial penetration testing and auditing tools such as Tenable s Nessus, Core Impact, Retina, WebInspect, and AppDetective; as well as open source tools such as Nmap, Nikto, Paros, Burp, and Metasploit.
Candidate should have experience working with software programming languages and working with different scripting languages such as PERL and Python C++, C#, .Net, ActiveX and Java programming experience is desirable.
Required Education:
Bachelor's degree in Information Technology or related field or equivalent and 4+ years of related experience, plus 2-3 working in the cyber security field.
ACS is an Equal Opportunity Employer and does not Discriminate against any applicant on the basis of race, color, religion/creed, national origin, gender, or sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by Federal or State law or local ordinance. People with disabilities who need a reasonable accommodation to apply or compete for employment with ACS may request such accommodations by calling or by sending an e-mail to accommodations@acs-.
Experience: see above.
To apply: http://www.gadball.com/job/20061210/security-engineer/?sid=18