Computer Incident Response Position

From: Erik Ginorio (eginorioat_private)
Date: Tue Dec 17 2002 - 09:06:34 PST

  • Next message: Gary Turner: "RE: What is a reasonable cut that a contracting company should ta ke?"

    Ok, second try for this position. If you a head hunter or have some kind of 
    auto responder set up, don't look for a reply from us. Last time I posted 
    this position I got a resume for a nurse and someone who fixes slot 
    machines, in addition to about 50 head hunters.
    
    
    Job:
    Cisco Systems Corporate Information Security Team is looking to fill a ful 
    time position in a new Incident Response Team. We would like to see someone 
    who is experienced in forensics on both Windows and Unix platforms (EnCase, 
    TCT, Task, whatever). They must have experience with, and know the 
    procedures on how to carry out an investigation for both external and 
    internal incidents. Strong host based skills (Windows and Unix) and some 
    programming experience a big plus. A firm grasp of common protocols, and 
    networks, as well as some leadership experience also required.
    
    We are looking for a *technical* person who would be willing to relocate to 
    Cisco Systems HQ in San Jose California or our sister site at Research 
    Triangle Park, North Carolina. If you think you fit the bill, send me your 
    resume. Good pay, stock, bonus program, benefits, relocation, etc, all 
    provided.
    
    *RESUMES NEED TO BE RECEIVED BY DEC 24TH*
    
    Here is the official job listing in typical HR speak:
    -----------------------------------------------------
    Incident Response Team Member:
    Inventory seized computers for identifiable information and duplicate
    magnetic media. Delete or neutralize computer viruses and file password
    protection. Print directory listing of active system, and hidden files.
    Detect and recover erased files, file slack, and file fragments. Execute
    files and view data contents as well as perform keyword/string searches.
    Provide testimony on evidence examination and handling as expert witness in
    judicial proceedings. Some travel required. Perform Risk Assessments and
    security posture assessments. Assist with security tool selection and
    strategic direction of security tools, systems and software packages. Lead
    small team of digital security investigators.
    
    Skills required:
    Recognized expert in particular or multiple technological fields of
    specialization within and outside of the organization. Must have performed
    multiple forensics examinations for law enforcement purposes. Must have
    solid knowledge of DOS, Windows, Unix, and Linux operating systems as well
    as hard drive, diskette, data tape, and data cartridge storage media. Must 
    have experience with NCase Functions as the highest level technical 
    resource. Certifications in the following a plus - Encase, IACIS. Cross-IT
    leadership in all technical disciplines focused on Incident Response and
    investigations.
    
    IT Engineer IV:
    Proactively anticipates framework and infrastructure requirements for
    security application needs. Receives assignments in the form of objectives
    towards long-range goals and objectives. Work is reviewed in terms of
    meeting IT specific initiatives. Strong understanding of all current
    security technologies and good understanding of emerging technologies.
    Focus on technology and how to use it. Leadership and mentoring skills.
    Drives and oversees the implementation of company wide projects. Provides
    leadership and direction on projects for maximum business impact. Typically
    reports to Sr Mgr IT or above. Goals set by overall Manager with assistance
    of group Director. Interfaces with all levels of IT and Business Partners
    in all areas of the company. Thorough understanding of applying technology
    to reach desired goal. Solves complex, cross-functional issues that cross
    many groups. Can apply good analytic process to any issue to help come to
    resolution. Accountable to highest levels of senior management to ensure
    project commitments and deliverables are met. Recommends and initiates
    projects to benefit cross-group and Cisco wide objectives. Identify and
    document design and architecture best practices for global adoption. Owns
    responsibility for driving worldwide architecture for global projects.
    
    Thanks!
    
    
    best regards,
        Erik Ginorio
    
    Corporate Information Security
    Cisco Systems
    eginorioat_private
    direct:408.853.6313
    fax:408.525.1484
    PGP Key ID:0x070AB400
    



    This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 12:24:19 PST