Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
 
Location
Country: United States
State/Prov: Illinois
City: Chicago
Position
Position/Title: Application Security Engineer
Position Type: Permanent F/T
Closing Date: 2009-11-13
Job Description: Most of the job will be manual pen testing (80%) of web-facing applications, and of course, you'd need to run automated scanning tools (mostly open source).

You will be responsible for vulnerability assessments and pen testing against:

XSS

SQL Injection

LDAP Injection

Input validation

Code reviews: Their apps are written in Java and .NET

Creating best coding practices and advising Assist on the network security AD RBAC (nice to know)

Researching new scanning tools, technology and establishing best practice

Sole ownership of application security
Job Requirements: *Ability to perform code reviews in Java and .NET

*Manual pen testing experience against SQL injections, XSS, Input Validation, LDAP injection

*Scanning tools
Contact Information
Contact Directions: Please contact me via email and let me know you saw the ad on securityfocus.org
Company: Greythorn
First Name:
Last Name:
Title: Sr. Technical Recruiter-Infosec
Email: corey.han (at) greythorninc (dot) com [email concealed]

 







 

Privacy Statement
Copyright 2009, SecurityFocus