| ||||||||||||||||||||
Forward Discovery has an immediate opening in Dubai, UAE for a Senior Incident Response Investigator. The position requires thorough knowledge of network technology as it relates to the response and investigation of computer network incidents. Candidates should possess a thorough and current knowledge of network threats and attack vectors. Candidates should also possess current skills in computer forensic analysis as it relates to network investigation and incident response. Additional skills and experience required include: · Malware analysis · CERT or Incident Response policy and procedure development · Excellent written and oral communication skills · Four-year degree, preferably in a related field · Experience with Windows, Unix and Linux operating systems · Experience in managing people and projects · Log analysis in the detection and investigation of intrusions · Experience working for telecommunications companies preferred · Computer programming skills are preferred · Certification in computer forensics is preferred Compensation package will be dependent upon relevant experience but will range from $100,000 to $150,000 plus housing allowance. The POC for this position is Steve Anson at: sanson@forwarddiscovery.com " (comments? | Score: 0)10 valuable advices to land a job in 2010
| ||||||||||||||||||||
|
This year and next year, bar none, security is the smart place to be in IT. - David Foote |
First of all, from the president on down, this nation is all about cybersecurity these days. It's one of the three hottest topics in Washington, D.C., and as my colleague Eric Chabrow says, you're likely to see some major cybersecurity policy at least discussed in 2010. Government agencies are eager to hire new, skilled security professionals.
The second hot topic in D.C. is healthcare. In 2009, the federal government gave healthcare organizations a boatload of money to create electronic records, and in 2010 it's going to enforce new regulations to help protect those records. Think this initiative won't call for additional personnel skilled in risk management, privacy and incident response? Good time to be an information security professional in healthcare. And stay tuned, please, for further discussion on this subject.
And then there's banking reform - the third hot topic in D.C. And while it's hard to imagine exactly how the regulatory agencies will be reshuffled when all the dealing is done, it is clear that: 1) There will be increased regulation, especially for non-banking financial institutions; 2) There will be greater consumer advocacy and security standards; 3) All of this regulatory pressure is going to require new bodies inside the institutions to secure critical systems, as well as outside to examine them.
Like I said, a good time to either start or re-start a career in information security.
I caught up recently with David Foote of Foote Partners LLC, a leading IT staffing research firm. He's been tracking technology-related job trends literally for decades now, and his assertion flat-out is: There's never been a better time to be an information security professional. "This year and next year, bar none, security is the smart place to be in IT," says Foote, who in his conversation with me discusses the wave that has driven the surge in security jobs, as well as his predictions for 2010-2012.
I'd be remiss if I didn't mention our recent Information Security Today Career Trends Survey, which looks academic, business and industry objectives for 2010, pointing to risk management, cybersecurity and fraud/forensics as the hottest topics for training in growth.
But what's the career outlook from your perspective? Where do you see the best information security jobs in 2010, and what are you doing to grow your own career?
Indeed, we are all lucky to have jobs these days. But we're even luckier to be in a field that's growing as quickly as information security.
Here's to a prosperous - and secure - 2010.
Job Title: Consultant - ISO 27001 Implementation & Certification
Closing Date: 28th Feb, 2009
Location: Doha, Qatar
Contact: Balwant Rathore at balwant_rathore@oissg.org
Profile:
The consultant should provide a structured programme to assist clients in ISO 27001 implementation for accreditation.
Required competencies:
Preferred competencies:
Others:
Interview Process:
"
Title: Security Engineer (“Penetration Tester & Hacker”)
Located in Charlotte, NC for large global leading co. with advancement opportunity. Will relocate the right individual(s). Multiple openings $75-105k. This client performs a background investigation on all new hires- checking credit history, possible drug screen, etc.
The Security Engineer’s role is to ensure the confidentiality, availability and integrity of in-house information systems. Will perform penetration testing and create own “hacking” resources (proposing new models and innovative strategies), not just use pre-packaged standard tools. Ideal candidate will have 3-10 years exp. performing Systems administration, Network administration, Shell scripting and automation, Security testing. Will design and perform audits, recoveries, monitor security performance. Strong hands-on technical knowledge of Firewalls, IDS/IPS, Windows, UNIX, TCP/IP. Support of McAffee and/or PGP products. Must have strong customer-focused skills, good communication and documentation abilities.
Cindy Miceli
Recruiter
Alta Associates
8 Bartles Corner Road
Flemington, NJ 08822
908-806-8442
"NOTE FROM CLEMENT:
I saw a great posting on http://www.myinfosecjob.com/ blog today.
It is a salary survey that demonstrate the well being of the ISC2 certifications. Out of the top five performers there was two that were Concentrations offered by ISC2. To get there you must complete your CISSP first and then complete one of the advanced certifications referred to as Concentrations by ISC2.
See details below from the www.myinfosecjob.com:
Certifications Magazine Salary Survey: CISSP-Concentrations most well-paid professional
December 1st, 2009
Infosec professionals always question themselves: should I go down the road of certifications?
Answers vary, but one thing is for sure: A certificate is not the end, it’s the mean. The real added value is the knowledge accumulated during your preparation for any given certification.
This week I’ve come across a factual article on earnings x certification. A snippet follows below:
” Rounding out the top five highest-paying certs in 2009 were: (ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP) with $136,060; Brocade Certified SAN Manager (BCSM) with $136,020; Brocade Certified Fabric Designer (BCFD or BCSD) with $135,600; and the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP) with $134,100.”
Wow, 2 CISSP-Concentration certifications among the top 5 most well paid. Does it tell you something?
BELOW YOU HAVE THE ARTICLE FROM THE MAGAZINE:
Certification Magazine’s 2009 Salary Survey By Certification Magazine Editorial Staff
11-30-2009 08:50 PM
Fifteen months ago, the world watched in horror as stock markets plummeted, debt skyrocketed, banks collapsed and the credit industry imploded, plunging the global economy into the worst recession since the Great Depression. No one knew what the next day, week or month — let alone year — had in store.
Suffice it to say, not much has changed. Though economists have pointed to early signs of recovery, we’re all still waiting with bated breath for some kind of certainty to emerge. This year’s CertMag Salary Survey received more than 40,000 responses from IT professionals in over 150 countries around the world — from Pakistan to the Philippines, from Bulgaria to Bangladesh. The good news is, despite the continued economic ambiguity, the results of our survey pointed to a few stable trends within the IT industry that could provide professionals with some direction for the coming year.
First, IT has been widely recognized as a growth industry — even in this climate — and our numbers reflected that. In 2009, the average U.S. total salary, including benefits and incentives, was a generous $96,677. That is a 9 percent gain over last year’s average of $88,640. However, this growth represents a slowdown from that of the previous year, when average total salaries jumped a dramatic 15 percent.
Also reflective of the times was the number of IT professionals who are experiencing pay cuts. About a quarter of you said you’ve either had your pay cut in the last year or expect to have your pay cut in the coming year. Fewer people reported getting incentives or bonuses this year, too — dropping from 41 percent of respondents in 2008 to 34 percent in 2009.
However, again proving the value of certification, many respondents reported receiving a raise after earning their most recent certification, with 30 percent of you saying that raise was between 10 and 20 percent. Then again, most of you (52 percent) said that raise was 5 percent or less, whereas last year the most common raise amount was 5 to 10 percent.
Also indicating the power of certification was the number of respondents who added more than two certifications to their portfolios this year. This figure jumped from 11.4 percent of respondents in 2008 to more than 30 percent in 2009, while the total number of people who earned at least one cert this year was more than 67 percent. Tellingly, a full 96 percent of respondents from the top five countries with the highest salaries said they were certified.
In the U.S., the top five highest-paying certs varied a bit this year from last year, although the general content areas stayed pretty much the same. The cert that commanded the highest salary this year was the Brocade Certified Network Engineer (BCNE, formerly FNCNE) with a whopping average total salary of $146,250. This bumped last year’s top cert, the Brocade Certified Fabric Designer (BCFD or BCSD), which had an average salary of $120,770 last year, to No. 4 this year.
Rounding out the top five highest-paying certs in 2009 were: (ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP) with $136,060; Brocade Certified SAN Manager (BCSM) with $136,020; Brocade Certified Fabric Designer (BCFD or BCSD) with $135,600; and the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP) with $134,100.
As evidenced by these results, a general focus on network and security issues continues to be a growing trend — and lucrative career choice — within the IT industry.
The cert that connoted the lowest salary was the CIW – Certified Internet Web Professional, with an average salary of $59,290. This was followed by the Microsoft Certified Desktop Support Technician (MCDST) with $62,030; the Cisco Certified Entry Networking Technician (CCENT) with $63,420; the HP: Accredited Platform Specialist (APS) with $64,180; and Dell certification with $67,190.
This is not too surprising given that many of these certs correspond with entry-level jobs or jobs that are not particularly “hot” right now.
No doubt about it: The past year has had its ups and downs. But as the results of the 2009 CertMag Salary Survey show, there are rays of light to be seen in the IT field. And while a certain level of uncertainty remains, IT professionals can use it as an opportunity to explore the new specializations or career paths that continue to emerge as the industry develops.
– Agatha Gilmore
Click on Read More... below this article to read the FULL story
"Acxiom Corporation is looking for a motivated self-starter with strong security background. The candidate must possess a strong attention to detail, thorough understanding of networking, and be a logical thinker. The position would be focused on protecting the network integrity of Acxiom and its outsourcing client environments.
This is an exciting, fast paced environment with numerous opportunities to take part in a variety of security designs. Working on Acxiom internal and external customer firewalls will challenge your engineering and design skills – are you up to the challenge?
This position is responsible for the following:
*Design/ Implementation of security architectures.
*Installation and configuration of Checkpoint and Cisco firewall solutions.
*Installation, management, and planning software and hardware upgrades.
*Troubleshooting of IP network communications.
*Monitoring firewall and proxy logs.
*Interfacing with vendors, clients, and users to design security solutions.
Required Skills:
*Knowledge of IP (TCP/UDP/ICMP) protocols.
*Candidate should possess relevant experience with key network vendor solutions (e.g., Checkpoint, etc).
*Strong communication skills.
*Must be comfortable in presenting both details to technical teams as well as business impact/risk analysis to management.
Nice to have skills:
*Experience with Nokia or Checkpoint Secure Platform.
*UNIX shell scripting and PERL experience.
*Clustering and/or High Availability experience.
*Security/Network Disaster Recovery experience.
*Database administration, backup, and recovery.
*Contingency planning.
*Good documentation and process diagramming skills.
*UNIX administration skills.
*Network/Security forensic experience.
Education:
*Requires BS/BA or equivalent; CCSA and CCSE certification desired.
Who are we?
A global leader in interactive marketing services, Acxiom connects clients with their customers through deep consumer insight, powering effective and profitable marketing initiatives and business decisions. Our consultative approach spans multiple industries and incorporates decades of experience in consumer data and analytics, information technology, data integration and consulting solutions for effective marketing across digital, Internet, email, mobile and direct mail channels. Founded in 1969, Acxiom is headquartered in Little Rock, Ark., and serves clients around the world from locations in the United States, Europe and Asia-Pacific. For more information about Acxiom, visit www.acxiom.com.
Resumes can be forwarded to methor@acxiom.com
Megan Thornton | Corporate Recruiter
Acxiom Recruiting Department
501-342-5759 office | 501-342-3724 fax
301 East Dave Ward Drive | Conway, AR, 72032 | USA | www.acxiom.com
From: jameel@itpeoplegulf.com
To: jameel@itpeoplegulf.com
Subject: URGENT: SIRT Candidate for Wipro - CISSP-CEH-GCIH-GCFA-CFIA-CHFI
Date: Sun, 30 Aug 2009 16:37:32 +0400
Dear All,
Please find the JD of the senior Security Incident Response & Forensics profile we had discussed about earlier. The location is Dubai.
We need at least a couple of good CVs by tomorrow. The need is urgent.
The Security Incident Response Team members should have at least 5+ years of experience in handling Security Incidents and preferably an overall experience of 6+ years.
Should be an expert on : (at least 80% of these)
· Using ENCASE and FTK forensic-analysis tools for analysis of Security Incidents
· Security Incident (hacks, illegal network penetration, website defacements, etc) forensic analysis
· Malware Analysis
· Threat & Vulnerability Management
· Network & Systems Security;
· Business Impact Analysis;
· Data Integrity/Recovery;
· System Audit & Correlation,
· Contingency Planning;
· Risk Assessment
· Shell scripting
Certifications
· GIAC Certified Incident Handler (GCIH)
· GIAC Certified Forensics Analyst (GCFA)
· CFIA - Certified Forensic Investigation Analyst
· Certified Computer Hacking and Forensic Investigator (CHFI),
· CISSP
· Certified Ethical Hacker (CEH)
They would also form part of the problem management team as well, which would be focused at arriving at Root-Causes and suggest corrective actions for high impact incidents and potential failures in the system. While being part of the Wipro service delivery team, they will have a reporting directly to the Du business leads. This would make these profiles really high-visibility profiles within the overall delivery setup.
TOTAL : 8-10 Yrs experience.
Md.Jameel Haji
IT People FZ LLC
Suite G06, Building # 1, Dubai Internet City
Dubai , U.A.E. PO Box 500123
(O) : + 9714 3911741 (F) : + 9714 3911745
(M) : + 971-50-8807599
"
Kind regards
M. Adeel Sadi
To All,
The FBI has just posted a truly unique employment opportunity, applications for which must be received on-line no later than May 25, 2009.
The position is that of a Senior Level Technical Forensic Advisor whose primary duty it is to advise and assist FBI executives on all issues affecting the acquisition, preservation, examination, processing, presentation and storage of digital evidence in support of both the FBI’s criminal and national security investigations.
The individual filling this position serve as a key architect responsible for mapping the future course of the exploding field of digital evidence forensics, including traditional computer hard drive forensics, network forensics, remote forensics, mobile forensics (e.g., cellular telephones), device forensics (e.g. GPS devices) and more.
The selected candidate would report directly only to Senior Executives of the FBI. The salary range for the position is $117.787 to $162,900 per year.
The FBI currently manages a network of over 400 certified digital evidence forensic examiners located across the country in FBI Field Offices, Laboratories and at FBI Headquarters in the Metro-Washington, DC area.
The FBI also operates and administers the FBI Digital Evidence Laboratory in Quantico, VA and Linthicum, MD as well as 14 existing Regional Computer Forensic Laboratories (RCFLs) across the country in collaboration with other Federal, State and local law enforcement agencies, all of which have either been accredited by the American Society of Criminal Laboratory Directors – Laboratory Accreditation Board (ASCLD-LAB) or are in the process of applying for the same.
Combined, these elements represent the world’s largest contingent of digital evidence forensic examiners operating under one central, validated, quality assurance system.
Details on the vacancy can be found at www.usajobs.gov as Job Announcement Number 18-2009-006, under the category “Senior Executive.”
Security Certification Rules Could Shake Up IT Management
6/25/2008 -- Requirements for professional security certification for IT workers in civilian agencies, now being readied by the Office of Management and Budget (OMB), would have a major impact on how government and industry recruit, train and manage their IT staffs, a security expert said Wednesday.
"They are going to affect every one of us in the field," contractors and government employees, said George Datesman, a senior manager at Noblis Inc., a nonprofit high-tech consultant.
Datesman -- who holds a master's degree in criminology and has 30 years experience in law enforcement, including a stint with the Justice Department -- said at a Digital Government Institute conference on cybersecurity that OMB is finalizing minimum requirements for professional certification. He had no time frame for their release.
As IT security has become professionalized, a number of certifications have achieved general recognition industrywide, including a suite from the International Information Systems Security Certification Consortium (ISC2). ISC2 maintains and administers examinations for:
Organizations awarding certifications would have to be accredited to meet a federal mandate. Datesman likened the situation to the law-enforcement field, which still is sorting out how to fully implement requirements for increased professional training and education 30 years after the movement began. Not only would there be new hiring requirements, there also could be increased responsibility and legal liability for workers and their employers.
"This is a change we have not faced in the IT security industry before," he added.
The closest parallel has been in the Defense Department, which anticipated OMB's reaction in this area. The DOD's Directive 8570 on information assurance, approved in December 2005, requires all of the department's information assurance workers to obtain an accredited commercial certification in computer security. The DOD has approved 13 certifications for the directive.
The DOD requirement already has thrown what one conference attendee called a giant monkey wrench into the IT security manpower market.
"If OMB issues a similar requirement, it's going to throw the supply-and-demand curve even more out of balance," he said.
Datesman agreed, saying it probably would take years for the supply of certified workers to catch up with demand. A CISSP certification, for example, requires five years' experience. "You don't mint them out of college," he said.
The requirement is likely to drive up the cost of recruiting professionals, not only in government but among government contractors, who also would have to meet the requirements in staffing government contracts. Government contract language also would have to change to reflect the requirements.
Other practical considerations would be the need to formally define IT security roles and jobs and spell out the knowledge, skills and abilities needed for each. Certification and training also would have to be verified by employers, possibly creating a backlog much like that for background checks in issuing personal-identity verification cards to government workers and contactors under Homeland Security Presidential Directive 12.
No amount of education and certification will completely fulfill the need for IT security professionalism, Datesman said.
"When we did this in law enforcement 30 years ago, what we learned was that 60 percent of what they needed to know is learned on the job," he said.
William Jackson, courtesy of GCN.com

![]()
This story appeared on Network World at
http://www.networkworld.com/newsletters/sec/2009/050409sec1.html
IA career development: Need for IA professionals will grow
Information assurance careers in a struggling economy
Security Strategies Alert
By
M. E. Kabay
Network World
05/05/2009
Recently I was asked by a journalist for comments on careers in information assurance. Little of what I wrote fit into the article, so I'm publishing my remarks here.
In response to a similar question some years ago, I published a paper for the American Association for the Advancement of Science which is still available as baseline information. A short piece entitled “Careers in Information Security” is available from my Web site and a longer piece is “Information Security Resources for Professional Development”.
We will see increasing integration of information assurance into the strategic thinking of organizations as managers realize that the economic downturn increases pressures for illegality. Employees and managers who are desperate for continued employment may find their ethical standards weakening; we already have documented cases from past years of employees and managers who have broken into competitors' systems to acquire competitive intelligence or to steal intellectual property that will yield an immediate economic advantage to their current employers. How many more will we see as they contemplate the specter of job loss?
The other factor I foresee is that the economic downturn will increase the demands of the market for better integration of security in commercial off-the-shelf software. Companies and other organizations which are counting pennies will become increasingly intolerant of the shoddy programming that has been typical of much of the software that passes for professional products in the current marketplace. Well-known errors that lead to common vulnerabilities as defined in the CVE (Common Vulnerabilities and Exposures) database will, in my view, become grounds for individual breach-of-contract lawsuits and possibly for class-action lawsuits. Readers may want to refer to Chapter 38, "Writing Secure Code" by Lester E. Nichols, Timothy Braithwaite and me from the recently released Computer Security Handbook, Fifth Edition (Wiley, 2009) (CSH5) for some useful background reading on these issues.
Another problem rooted in the poor economy is personnel management. As employees become more stressed, employee management for sound information security becomes increasingly important. Chapter 45 on “Employment Policies and practices” by Bridgitt Roberson and myself in the CSH5 presents practical advice.
IA professionals must understand that assuring the six fundamental attributes of information security is absolutely integral to meeting the strategic needs of every organization. Confidentiality, control or possession, integrity, authenticity, availability and utility (the Parkerian Hexad) are at the heart of IA (narrated PowerPoint file available). See Chapter 3, “Towards a New Framework for Information Security” by Donn B Parker in the CSH5.
At the same time, IA professionals must learn to apply rational risk management to all of our decisions; we cannot swagger around the organization barking orders at our colleagues as if we were zealots enforcing a mystical doctrine. IA serves the interests of the organization in a context of risk assessment and rational allocation of resources. IA personnel must use every managerial and psychological skill available to convince colleagues to collaborate in protecting information assets – coercion does not work. Thus in addition to technical understanding and skills, IA practitioners need to be able to listen, learn, analyze and respond to the needs of their colleagues and to recognize the strategic goals of the organization so that they can put their efforts where they will count.
Being able to communicate well is a tremendous asset for IA professionals, and that's why the Master of Science in Information Assurance (MSIA) at Norwich University includes so much analysis and writing as part of its curriculum. Many of our graduates have written back to us over the years to thank us for the honing of their communications skills.
Another side of career development is visibility. Practitioners will do well for their profession and for their careers by sharing knowledge with others through presentations at professional user group meetings and larger conferences. Young people, in particular, benefit in all ways by writing thoughtful, factual, insightful articles on information assurance issues; not only do they legitimately feel a glow of achievement in helping others, they also expose themselves to new challenges that encourage additional thought and they add credibility to their résumés.
A White Paper on “IA Education in a {Rec,Depr}ession” is available with an extended discussion of these topics.
I hope that readers who know young people (including high-school students) who have expressed interest in IA careers will pass this article on to them and to their guidance counselors. M. E. Kabay, PhD, CISSP-ISSMP, specializes in security and operations management consulting services. CV online.
All contents copyright 1995-2009 Network World, Inc. http://www.networkworld.com"|
Job Title |
Penetration Testing Consultant |
|
Closing Date: |
25th May, 2009 |
|
Location: |
Doha, Qatar |
|
Contact: |
Balwant Rathore at balwant_rathore@oissg.org |
Penetration Tester
Profile:
The consultant should provide a structured programme of penetration testing and delivery of a management report providing recommendations to improve security posture of the organization.
Required competencies:
Required experience:
Desired competencies:
Interview Process:
Booz Allen Hamilton has 52 open positions for CISSPs in CA, VA, MD, IL, MI, TX, DC, PA, SC.
Check details at: http://www.boozallen.com/careers
NOTE FROM CLEMENT:
Andrew used to be the maintainer of the www.cisspworld.com web site. He just came out with a new site posting job offer. Andrew has always been a great community player and this is why I am posting the announcement about his new site. See below:
Since 2001 we have worked with security professionals and security recruiters to bring them together through something called security-jobs.info. We started originally with a mailing list, moved on to a very successfull linkedin.com group and three weeks ago we launched the website and I'd like to invite you all to visit us at https://www.security-jobs.info/
The new website already has over 700 security professionals who are able to upload or create their online resumes, browse and apply for jobs all around the world.
The site has over 100 security recruiters and agencies on there primarily from the UK, America and Australia advertising over 100 new roles.
For employers our aim is to provid a candidate rich environment. For job seekers we aim to show you interesting possibilities of what could be.
Our focus is to expand the recruiter base over the coming months to cover all of the USA, Most of Europe and India as a priority but we are always happy to speak to individuals and companies who have specific needs and we will do what we can to find individuals or companies in locations not currently on our plan, just ask.
All the details we hold come under the protection of the UK Data Protection Act.
Should you require any help we have a dedicated support team and details on how to log a support ticket are on the front page of the site.
We hope you will come and visit us soon and sign up at https://www.security-jobs.info/
Kind regards
Andrew Cardwell CISSP-ISSMP, CISM, CISA, SC
USA
MIDDLE EAST
Dubai, Qatar, Kuwait, Oman
EUROPEAN UNION
Dublin, Ireland
ESPION
AFRICA
Yaounde-Cameroun
GetSec![]()
Lagos, Nigeria
Digital Encode
This web site is not associated directly or indirectly with ISC2, the SANS Institute, ISACA, or other certification authority. The GCFW, CISSP, SSCP, ISSEP, ISSMP, CISA, and CISM are all the property of their respecful owners. The content of this site is provided to you freely due to the generosity of our sponsors.