Senior SW/HW/NW Security Specialist

Position Description

Provide the security analysis of a software product designed to operate over a network. The position will require the candidate to analyze and test source code for potential security vulnerabilities or weaknesses in information assurance guideline implementation. This position will require code analysis and network protocol analysis as well as operational scenario implementation in a closed test environment and eventually an operational environment.

The task will consist of a standard discovery phase to be followed by an evaluation phase and a reporting phase. The discovery phase will include analysis of software documentation, analysis and establishment of test environment and test plan requirements, test environment set-up, and code and network protocol implementation. The evaluation phase will implement the test plan using operational scenarios as the basis for evaluation. The result of the activity will be to develop an analysis identifying the product(s), the implementation mechanisms, potential vulnerabilities, recommendations and provide a suggested path forward.

Position Requirements

The successful candidate will have a good understanding of source code analysis, software and network security engineering principles and information assurance principles.

In addition, the successful candidate will be familiar with setting up small isolated networks to reflect real-world environments and implementing test scenarios to determine security effectiveness of the software under test.

The successful candidate will have experience analyzing network application source code and analyzing network protocols for vulnerabilities.

General knowledge of multi-level security and multiple secure levels in software or data environments.

• Knowledge of techniques and practices used to corrupt software with security infiltration techniques.
• Java
• Network protocol analysis (e.g. TCP/IP and UDP Networking protocols or unique protocols).
• IKE and PKI protocols.
• Software and Network analysis to include File and Network protocol fuzzing.
• Software and hardware debugging tools (GDB or JTAG).
• Years of Experience: 7-8
• Clearance Level: TS//SCI with successful polygraph

Position Locations

Linthicum, MD

Position Req Number

IDG-189