SECURITY RESEARCHER / VULNERABILITY SPECIALIST

Target Labs, Inc; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

A technology firm in San Francisco is looking for a Security Researcher/Vulnerability Specialist to lead vulnerability assessments on diverse systems. The ideal candidate will have extensive experience in security research, particularly with a focus on network protocols and common vulnerabilities. Strong analytical skills and a CISSP certification (or in progress) are required. This role involves technical leadership with a focus on third-party engagement and system security.

Qualifications

• 6-8 years of experience in security research and vulnerability analysis.
• 1-3 years of experience as a team lead.
• Knowledge of vulnerability sources and intelligence sources.

Responsibilities

• Lead technical vulnerability research and assessments.
• Conduct vulnerability analysis on various systems and applications.

Skills

Security research

Vulnerability analysis

Network protocol analysis

Strong analytical ability

Presentation skills

Education

CISSP certification

Certified Ethical Hacker (CEH)

Tools

Wireshark

Job description

SECURITY RESEARCHER / VULNERABILITY SPECIALIST

Targeted Start: 11/7/2012

Travel Required: Not Required

Overview

This is a technical leadership position with direct reports and is third party facing. Technical responsibilities include vulnerability research and individual assessments of everything from SCADA systems to mobile applications.

Location

Downtown San Francisco, CA

Responsibilities

• This is a technical leadership position with direct reports and is third party facing.
• Technical responsibilities include vulnerability research and individual assessments of everything from SCADA systems to mobile applications.

Qualifications

• Experience doing security research and performing vulnerability analysis, usually gained over 6-8 years.
• Extensive experience doing network protocol analysis, with and without network tools such as Wireshark.
• Expertise in understanding common security vulnerabilities, with enough technical expertise to perform the following: buffer overflow attacks; Teardrop and packet fragmentation attacks.
• Experience working as a team lead, typically gained from 1-3 years.
• Experience with security consulting (from 1-3 years) preferred.
• Strong technical understanding of vulnerabilities and how attackers can exploit vulnerabilities to compromise systems, including systems level knowledge of Microsoft Windows platforms, UNIX platforms, and common networking platforms.
• Knowledge of vulnerability sources such as SANS, US-CERT, commercial vendors (Symantec, SecureWorks, IBM, etc.).
• Strong analytical ability with readiness to defend analysis in the face of countervailing opinions.
• Knowledge of paid intelligence sources such as Verizon iDefense, RiskIQ, Critical Intelligence, Cybertrust.
• Ability to work effectively with an incomplete data set; willing to apply logic and academic rigor to make sound analytical leaps.
• A quick study of new technologies, industries and scenarios.
• Strong presentation and verbal communication skills.
• Experience with the government or utility industry preferred.

Desired Certifications

• CISSP certification required (or in progress).
• General security certifications (such as Certified Ethical Hacker, CEH) preferred.