Senior Information Security Engineer
eBay (Silicon Valley/Peninsula, California)

This job posting has expired.

You may wish to try a search for Senior Information Security Engineer

Or visit the FlipDog home page
 

Description:

Senior Information Security Engineer

- Protect the eBay, Inc. community by contributing to a world-class information security team.
- You are a self-motivated engineer who will be part of the security research and testing team.
- You will collaborate with product development, application architecture, security architecture, site operations, network security, and other stakeholders to secure the platforms of eBay and the marketplaces adjacencies.
- You will research emerging classes of security vulnerabilities, create threat models against those vulnerabilities and develop strategies for efficiently penetration testing eBay Marketplaces platforms.
- You will coordinate red teaming excercises and evaluate the risk exposure of eBay Marketplaces platforms to make recommendations for mitigation and platform strengthening.
- You will assist in consulting on implementation of changes to enhance system and network security.
- You will be part of a security oncall phone rotation and periodically called on to provide security expertise during escalated events and investigations.

Qualifications:

Technical Attributes Required:
- Bachelor's Degree (CS, EE or Equivalent)
- Demonstrable experience with security threat modelling, application penetration testing, application code review, mitigations and design consulting.
- Experience working in a professional environment involving global applications and site-critical functions.
- Total of 6+ years in the area of Operations, Network Security, Application architecture or Information Security.
- Strong technical documentation skills.
- Experience working with non-traditional platforms and cutting edge technologies is a plus.

Personal Attributes Required:
- Ability to communicate effectively, both verbally and in writing to technical or non-technical audiences.
- Strong sense of professionalism and ethics.
- Enthusiasm and interest in information security.
- Initiative to take on tasks without prompting, manage one's own time and projects, lead project teams, a self-starter.
- Ability to work as a member of a large security team, as well as work individually on projects.
- Experience with a major security consulting firm is a plus.

Expertise in the following is a plus:
- Security assessments & vulnerability scanning
- Penetration testing / ethical hacking
- Risk analysis & security threat modelling
- Application security audit and scanning tools and techniques
- Knowledge of network devices, firewalls, IDS/IPS.
- Good knowledge of TCP/IP protocols and network architecture.
- Good knowledge of web-based applications and associated attack vectors.
- Strong experience with UNIX and Windows based operating systems.
- Experience with writing and reviewing C, Java, Perl, PHP, Python, HTML, Javascript, Flash and shell scripting is a plus.
- Experience conducting investigations and file level/bit level forensics using EnCase and other common investigative tools is a plus.

Certifications considered a plus:
- CISSP, EnCE, GCFA Security, SANS certificates.

Salary/Benefits: Salary commensurate with experience Job Location: san jose, CA Job Number: RUSAEBAY7092-586742 Company URL: http://www.ebaycareers.com