Home       |     Overview      |     Candidate Login      |     Post Resume       |     Contact us
 
  
     
     
Search Jobs
     
Keywords,Title,Skills,Company  Location,City,State,Zip  
  Advanced Search
     
Executive Order 11246, Section 503 & VEVRAA EOE, including disability/vets
Assessments Ethical Hacking And Penetration Testing Web Security Testing Mitigatio
 
Requirement id 49220
Job title Consultant
Job location in Columbus, OH
Skills required Sr. Business SME, CISSP, CEH Information Technology, Information Security, Assessments Ethical Hacking And Penetrat
Open Date 20-Oct-2015
Close Date
Job type Not specified
Duration 1 Months
Compensation DOE
Status requirement ---
Job interview type Face to Face interview
Apply
   Email Recruiter: coolsoft
Job Description Consultant: Sr. Business SME, CISSP, CEH Information Technology, Information Security, Assessments Ethical Hacking And Penetrat

Description:


The Client is seeking a Sharepoint Security SME to conduct a security assessment on their public accessible information i.e. vendor portal and Employee portal
Interviews are in person. Resumes are due to the manager on Tuesday the 20th. Interviews will be conducted that week.
This is a short term engagement for 160 hours initially. Work will be conducted remotely outside the agency network with on site meetings as needed.

These activities will be conducted from outside the agency network with limited knowledge of the network design and infrastructure. Based on details required from the assessment efforts and other publically accessible information, the SME will conduct a security assessment and attempt to breach agency resources including: Vendor Portal (Registration Process), Vendor Portal (secured features such as bids submitted prior to bid opening), and Employee Portal. Assessment should also include efforts to ensure the Vendor Portal and Employee Portal cannot be disabled or modified through security vulnerabilities. As part of assessment, SME is not to actually disable or modify the Portals, but to report on SMEs ability to do so. Daily progress reports will be required outlining testing details, progress and plans. All major vulnerabilities and/or successful breaches will be reported to agency contact immediately. The SME should have skills and experience implementing and testing SharePoint Site security, SQL injections and overall web security testing. Microsoft Dynamics AX experience is a plus. All tool sets for this testing will be supplied by the SME. Develop executive level reports and details regarding specific methods used in testing, vulnerabilities identified, severity rating and a specific mitigation strategy. Written draft detail reports must be available for review by 11/15/2015, with final reports due by 11/20/2015. The SME will be available to agency technical staff during regular business hours (8 am – 5 pm weekdays), or after hours if over weekends and holidays as needed for detailed technical discussions of findings as necessary and provide expertise in mitigation strategies. All test results are confidential and are the property of the agency.


Required Skills:


* All roles and responsibilities listed in Sr. Business SME
* Posses the following certifications in active status: CISSP, CEH
information technology experience
* Information security experience
* Assessments, ethical hacking, and penetration testing
* Experience with commerical and open source tools used to conduct testing
* Experience with web security testing
* Experience developing and delivering executive level reports detailing methods used, results
* Experience with mitigation strategies
* Excellent interpersonal skills
* Experience implementing and testing Sharepoint site security
* Experience with SQL injections


Desired Skills:


* Microsoft dynamicsAX experience is a plus
 
Call 502-379-4456 Ext 100 for more details. Please provide Requirement id: 49220 while calling.
 
Other jobs in OH: Cincinnati (1), Cleveland (1), Columbus (233), Dublin (8), Solon (2),
 
 
 
 
(Consultant: Sr. Business SME, CISSP, CEH Information Technology, Information Security, Assessments Ethical Hacking And Penetrat in Columbus, OH)
     
Search Jobs
     
Keywords,Title,Skills,Company  Location,City,State,Zip  
  Advanced Search
     

    About Us     Services    Privacy policy    Legal     Contact us