INFORMATION SECURITY ENGINEER
Job Field: Legal Jobs
Location: San Francisco, CA
Salary: $Not stated
JOB SUMMARY:
</tr>
<tr><td valign="top" width="450"><b>Information Security EngineerFull-Time — San Francisco, CAAbout This JobTwitter is looking for new members of our technical staff to help us improve network and infrastructure security. These are exciting roles in which you will interface with Twitter''s amazing product, front-end, networking, and operations teams, to name a few. You should have a passion for securing high-profile resources used by millions of people.Which one(s) are you?BuilderWhat you’ll do:* Help design, implement, and maintain information security policies, standards, and procedures* Review changes to infrastructure components for potential security impact* Harden laptops, servers, and networking gear of all types* Improve log management practices and technologiesWhat you’ll need:* Experience deploying network based security systems and tools such as appliances, 802.1X, NAC, VPN, firewalls, and identity management technologies like PKI, LDAP, and Kerberos* Familiarity with a wide variety of networking technologies and configurations BreakerWhat you’ll do:* Conduct regular security assessments of Twitter’s infrastructure, products, and partners* Pro-actively look for ways to penetrate and then update Twitter''s securityWhat you’ll need:* Experience working on a penetration team, documenting results for internal and audit purposes* Knowledge of open source and commercial tools, as well as experience on the command line* CTF experience a bonus AnalystWhat you’ll do:* Design, develop, and use tools to detect malicious activity at the user, host, and network level* Work with teams across the company to tighten the security of their systems* Lead incident response and mitigation effortsWhat you’ll need:* Experience with a commercial SIEM/SEM product such as Q1 Labs, Arcsight or similar* Extensive knowledge of current Internet security issues and best practices* Experience correlating data across a wide variety of log and other sources to locate intrusions and data theft* Experience in evidence handling and forensics* Thorough understanding of the attacker lifecycle and emerging threatsRequirements (all)* M.S. Computer Science or equivalent work experience* Strong understanding of TCP/IP stack, network security, and access control* Experience developing and debugging in Python, Ruby, and/or Scala on Linux/Unix* Disciplined approach to development, testing, and quality assurance* Excellent verbal and written communication skills* A passion for security, privacy, and defending our users, both internal and external* Comfortable working in an open floor planHighly Desired* Active user of Twitter* Active Twitter API developer* Experience with security frameworks such as ISO 27001/2, PCI, SOX, ITGC* Experience with Ops technologies like Puppet, Git, SVN, Zookeeper, Scribe, syslog, Nagios* Experience defending against malware, phishing, and other attacks against a corporation* Experience hardening Microsoft Windows deployments* Contributions to public security research, presenting at security conferences, or blogging Apply for this job To check on an application you
KEY REQUIREMENTS:
Not stated