SRP Security Engineering and Consulting Support

POSITION TITLE: SRP SECURITY ENGINEERING AND CONSULTING SUPPORT

LOCATION: SACRAMENTO, CA 95605

POSITION TYPE: W2/C2C/1099

CONTACT DURATION: 10MONTHS + (STRONG POSSIBILITY OF EXTENSION)

MINIMUM QUALIFICATIONS

IT Security for minimum qualifications required for this engagement. In addition, the following additional MQs are required for this engagement:

Senior Technical Specialist:

1. Must have 10+ years of experience defining, developing and implementing security processes;

2. Must have 10+ years of experience designing, developing, and implementing enterprise security services;

3. Must have 10+ years of experience in network security architecture;

4. Must have 6+ years of experience with security frameworks (eg, ISO 27002, NIST, etc.);

5. Must have 6+ years of experience running security tools and related software;

6. Must have 6+ years of technical security experience in applying information security and privacy best practices;

7. Must hold a SANS/GIAC Web Application Penetration Tester (GWAPT) certification;

8. Must have 6+ years of experience implementing the risk management and information security management frameworks adopted by the State of California.

9. Must have 6+ years in security incident response planning, detection and analysis, containment, eradication, recovery, and post incident activity.

Technical Specialist:

1. Must have 5+ years of experience defining, developing and implementing security processes;

2. Must have 5+ years of experience designing, developing, and implementing secure JavaScript processes;

3. Must have 5+ years of experience in designing, developing, and implementing secure SQL processes, queries and stored procedures;

4. Must have 5+ years of experience with security frameworks (eg, ISO 27002, NIST, etc.);

5. Must have 5+ years of experience running security tools and related software;

6. Must have 5+ years of technical security experience in applying information security and privacy best practices;

7. Must hold a SANS/GIAC Web Application Penetration Tester (GWAPT) certification;

8. Must have 5+ years of experience implementing the risk management and information security management frameworks adopted by the State of California.

9. Must have 5+ years of experience creating exploits for testing OWASP Top 10 Web Application Security Risks.