As a Principal Security Signature Engineer you will be part of a motivated engineering team that is responsible for the research, development, and delivery of vulnerability signatures in the QualysGuard on demand security service. This opening is your opportunity to work in the rapidly expanding field of computer security with a company with excellent customer ratings and outstanding growth rates.
Responsibilities:
- Research Zero-day and actively attack vulnerabilities to create remote signatures to identify vulnerable Operating Systems.
- Research vulnerabilities and build mitigation/counter-measures techniques for them.- Build automation and tools for alerting on latest threats.- Research new and emerging technologies to identify vulnerabilities and exploits.- Create signatures for the QualysGuard product to detect vulnerabilities in the areas of Operating System, TCP/IP Protocols and network devices.- Analyze emerging classes of vulnerabilities and exploits and create original research content.- Externalize research by writing blog posts, presenting at security conferences etc.
Qualifications:
* 8+ years of industry experience in network and systems security. * In-depth knowledge of TCP/IP, HTTP, FTP, SSH, SSL and SMTP protocols. * Strong experience with scripting languages(Python/PHP/GO etc) and Bash * Experience with network analysis tools, analysis of packet captures. * Proficient with regular expressions. * System administrator experience on Windows or Unix platforms. * Strong understanding of VPN, Firewalls, Intrusion detection system (IDS). * Excellent written and verbal communication skills.
Additional Competencies: * Experience with Lua * Experience with Reverse Engineeting tools like OllyDBG, IDA PRO etc * Knowledge of Virtualization software (VMWare, Virtual PC/Virtual Box, XEN, etc) * Experience in the use of vulnerability scanners, IDS and open source security tools. * Experience in developing security related tools/programs. * OSCP, CISSP or SANS GIAC certifications.
