Code Review Consultant- New York City

From: Harris Cohen <harris(at)securitysearch.com>
Date: Tue Nov 05 2002 - 14:10:53 EST

('binary' encoding is not supported, stored as-is)

Our client, a leading security software company is looking for Consultants with a good development background who are also comfortable learning new programming languages, protocols, operating systems environments, etc. as needed. You will primarily be doing code review and host assessment style work with the possiblity of some pen test work on an as-needed project style basis.  

This is usually onsite work although some remote work might be possible, especially when the system uses publicly available software modules.  

Code review work:
- ongoing C and C++ review

• occasional Java on a project basis
• some perl and shell scripts
• some fortran but not usually very relevant
• in-house software is ongoing work, custom software & public domain software are on a project style basis
• a lot of XML parsing software seems to pop up lately, so XML familiarity is good but not necessary (just need to be able to learn about these kinds of things as you go)

Host assessment work:
- lots of DG/UX (it's ok that no-one's seen this before, again, just need
to be able to learn as you go)
- Solaris

• occasional Win2K on a per-project basis

Pen test work:
- various hosts possibly including network devices

• very focused on gaining access (ie writing exploits)
• NOT general vulnerability scans
• need to be prepared to write exploits. this isn't always necessary but is sometimes required when the motivation for the pen test is to prove some kind of point.

Please send resumes to leslie@whitmangroup.com Leslie Janis
The Whitman Group Received on Wed Nov 6 16:42:44 2002