Security Jobs

CSO Wanted

» Post A Job » View All Jobs

Sr. Information Security Malware Specialist.-12312BR

Bose Corporation

Framingham, MA

Job Description

As a member of the IT Security team, you will manage the proactive analysis to detect unauthorized system activity, errors, and threats.

ÃÂ¢ÃÂÃÂ¢ Perform analysis of viruses, worms, Trojan horses, logic bombs, and other forms of destructive program code designed to disrupt business activities, gain unauthorized access to company data, and/or otherwise cause harm to the companyÃÂ¢ÃÂÃÂs CI (confidential information ) and HCI (highly confidential information).

ÃÂ¢ÃÂÃÂ¢ Conduct root cause analysis including reverse engineering, behavioral and code-based review, protocol analysis and debugging.

ÃÂ¢ÃÂÃÂ¢ Research, defines, deploys, maintains and enhances the companyÃÂ¢ÃÂÃÂs malware capabilities via policy, central and decentralized teams, technologies, and training programs.

ÃÂ¢ÃÂÃÂ¢ Examine existing malware posture, and develop new technological approaches, as well as policies, processes and procedures, to reduce vulnerabilities (including early warning), maximize the efficiency and effectiveness of malware incident response, and minimize the business and IT impacts of malware-related incidents.

ÃÂ¢ÃÂÃÂ¢ Ensure malware processes and procedures support global business and IT activities across global company locations.

ÃÂ¢ÃÂÃÂ¢ Define and implements a global, 24x7 threat management capability.

RESOURCE CENTER

buy a link »

Requirements

ÃÂ¢ÃÂÃÂ¢ Requires direct, hands-on activity during testing, benchmarking, and production rollout of complex and diverse technologies; researches current trends and emerging technologies that may impact the company.

ÃÂ¢ÃÂÃÂ¢ Must be conversant in, and identify integration points with: SIM/SEM; log and monitoring management; IDS/IPS; firewalls; identity and access management; VPN; encryption; wireless communications; PKI; mail and mail alternatives; desktop and mobile computing controls; vulnerability scanning; heuristic scanning tools; external feeds and sources of alert notifications; early warning systems; CIRT capability deployment; forensic readiness; and internal/external content filtering and monitoring.

ÃÂ¢ÃÂÃÂ¢ Must be able to manage the malware program to legal and contractual requirements.

ÃÂ¢ÃÂÃÂ¢ Must be infosec-certified and accredited (CISSP required; CIPP, CPP, CISM and technology-specific certifications preferred).

ÃÂ¢ÃÂÃÂ¢ Excellent verbal and written communication.

ÃÂ¢ÃÂÃÂ¢ Excellent facilitation skills in both formal and ad-hoc situations.

ÃÂ¢ÃÂÃÂ¢ Must have superb ÃÂ¢ÃÂÃÂdrill-downÃÂ¢ÃÂÃÂ capabilities in order to unravel complex technical issues.

ÃÂ¢ÃÂÃÂ¢ Ability to determine innovative approaches to traditional information security issues.

ÃÂ¢ÃÂÃÂ¢ Must be inquisitive, resourceful, and tireless in identifying and minimizing vulnerabilities and risk exposure.

The candidate must be a self-starter and display an intuitive, curious, and investigatory nature in identifying technologies used or being considered through the company. The ability to think ÃÂ¢ÃÂÃÂout of the boxÃÂ¢ÃÂÃÂ is essential as wide interpretation of issues affecting the company must be considered. The candidate must have a good rapport with business unit leaders and be viewed as a collaborative individual.

Education: Bachelor's degree required.