Security Engineer, Reston

---------------------------------------------------
SECURITYFOCUS JOBS - NEW OPPORTUNITY
---------------------------------------------------


JOB DESCRIPTION
---------------------------------------------------
Position:       Security Engineer
Location:       Reston, Virginia, United States
Type:           Permanent F/T

Closing Date:   2006-03-26

Technical Security Engineer
Requisition Numbers - 52464BR
www.aol.com/careers


This position is within AOL's Incident Response and
Security Assurance team.  The team is a part of a larger
Technical Security organization whose mission is to design,
build and maintain the security infrastructure and provide
technical security services to AOL and Time Warner.

Primary areas of responsibility are:

- Provide security assurance and consultation services,
including activities such as:
-- reviewing technical specifications and requirements of
applications and systems infrastructure
-- risk/vulnerability analysis of application and
infrastructure designs and implementations
-- performing security assessments, evaluations and auditing
of web applications and systems infrastructure

- Coordinate technical security incident response and
recovery activities in support of Time Warner Affiliates
(Time Warner, America Online, Turner/CNN, Warner Bros, HBO,
and Time Warner Cable), including activities such as:
-- assist with detection, analysis, and containment of
malicious code threats [botnets, trojan horse programs,
worms]
-- perform forensic analysis of potentially compromised
applications or systems
-- assist with response actions to denial of service events

- Assist in development of technical security policy,
security standards and baselines and training/outreach
programs such as:
-- develop and maintain technical security standards to
govern operating practices within various information
security subject areas [ie, operating system security, use
of encryption, network security, authentication,
authorization, and auditing (AAA), etc.]
-- develop and maintain training modules in various
information security practices for the purposes of employee
awareness and education

- Engineer security solutions to protect a variety of users,
applications, platforms and computing environments
including:
-- research, develop and maintain groundbreaking,
proprietary threat detection, prevention, and management
systems
-- research, develop and maintain security auditing and
forensic tools into existing processes and technical suites


JOB REQUIREMENTS
---------------------------------------------------
Skills Required:

- 4-6 years experience in security assurance and auditing,
security engineering, or secure systems development in a
heterogeneous, multi-platform, multi-protocol environment

- Demonstrated knowledge of information security principles,
standards, practices and subject areas

- Demonstrated knowledge of information security management
models, standards and control objectives, such as ISO 17799,
IA-CMM, Payment Card Industry Data Security Standard
(PCIDSS), and Sarbanes-Oxley 

- Proficiency with various network, host and application
security protocols, tools and auditing packages

- Excellent written communication skills and the proven
ability to present complex, technical information to both
technical and non-technical audiences

Skills Desired:

- Secure software development experience and/or solid
scripting/coding skills

- Previous experience on a Computer Incident or Emergency
Response Team

- Knowledge of cryptographic standards, ciphers, algorithms
and PKI  

Years of Experience Required: 

4-6

Education/Equiv. Experience: 

Bachelors

Unique Requirements:

- Must be willing to take part in a 24x7 On-Call Pager
rotation and willing to be on occasional travel.


CONTACT
---------------------------------------------------
Please submit resume to SecJob <at> AOL <dot>
com.

America Online, Inc.
Sec Job

SecJobaol.com



---------------------------------------------------
SECURITYFOCUS JOBS
---------------------------------------------------
SecurityFocus now offers an online interface for
searching and managing job opportunities and resumes.

http://www.security
focus.com/jobs