Internet Security Systems, Inc. Job Description Job Title: Security Research Engineer Location: Atlanta, Ga Department: X-Force Reports To: Samuel Cure Prepared Date: 10 Jan 2000 SUMMARY Researches, develops, and tests security vulnerabilities, creates security advisories, and adds entries to the X-Force vulnerability database. ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties may be assigned. Researches vulnerabilities that affect multiple platforms (Unix, Linux, and Windows) and adds new entries to the database. Tests and verifies vulnerabilities, reported from a non-trusted source, in a lab environment. Closely monitors security vulnerability database for completeness, correctness, and verifying technical accuracy. Observes production, developmental, and experimental activities to determine operating procedure and detail. Interviews production and engineering personnel and reads mail groups, newsgroups, websites, reports, and other material to become familiar with product technologies and production methods. Organizes material and creates security information according to set standards regarding order, clarity, conciseness, style, and terminology. Maintains records and files of work and revisions. SUPERVISORY RESPONSIBILITIES This job has no supervisory responsibilities. QUALIFICATIONS To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. EDUCATION and/or EXPERIENCE At least two years Unix and Windows security experience in a networking environment and good technical writing skills. A thorough understanding of backdoors, trojan horse programs, buffer overflows, and denial of service attacks. Bachelor's degree (B. A.) or equivalent from four-year college or technical school; or one year to two years related experience and/or training; or equivalent combination of education and experience. LANGUAGE SKILLS Must network security savvy and have impeccable writing skills, with emphasis on style and format specialized for the computer security sector. Ability to read, analyze, and interpret common scientific and technical journals, Internet websites and mailing groups, and business documents. Ability to respond to common inquiries or complaints from internal customers, business customers, or members of the business community. REASONING ABILITY Must be able to research computer security issues, exhaustively document and cross-reference issues discovered during research, and make efficient use of research material and technical personnel. Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables. PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is regularly required to sit and use hands to finger, handle, or feel. Specifically, the employee uses fingers to key a computer keyboard. Specific vision abilities required by this job include close vision. WORK ENVIRONMENT The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually quiet.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:23:53 PDT