SENIOR WEB SECURITY RESEARCHER
Job Field: Legal Jobs
Location: San Francisco, CA
Salary: $Not stated
JOB SUMMARY:
</tr>
<tr><td valign="top" width="450"><b>Title: Senior Web Security ResearcherLocation: Americas-USW-San FranciscoJob Number:_11769Adobe believes in hiring the very best. We are known for our vibrant, dynamic and rewarding workplace where personal and professional fulfillment and company success go hand in hand. We take pride in creating exceptional work experiences, encouraging innovation and being involved with our employees, customers and communities. We invite you to discover what makes Adobe a place where exceptional people thrive.Click this link to experience A Day in the Life at Adobe:http://www.adobe.com/aboutadobe/careeropp/fma/dayinthelife/Position summaryThe Adobe Secure Software Engineering Team is looking for someone with extraordinary web security skills who is an expert in how to find, fix, and prevent vulnerabilities in our software.The Adobe Secure Software Engineering Team is a dynamic, high-profile team involved in thedevelopment of every Adobe product, so this is a great opportunity to make a difference at a softwarecompany.ResponsibilitiesTechnical Guidance:* Deep knowledge of web application attack and mitigation techniques (XSS, CSRF, SQL Injection,and Session Management)* Knowledge of web security protocols* Respond to web security incidents* Coordinate with peers from other web companies* Guide teams on adoption and execution of a Secure Product Life Cycle* Lead implementation of threat models, secure software test plans, policy, and procedures forproduct engineering and QE.* Communicate security information to users and customers through blogs, white papers, and/orconference presentations.* Educate product teams on security best practices by providing real-world examples and hands ontraining.* Find and fix security and privacy flaws across the Adobe product line.* Develop tools to automate security testing and enable more efficient discovery and resolution ofsecurity problems.* Conduct code reviews of products built in ActionScript, Java, JavaScript, ColdFusion, Ruby on* Rails, PHP, and/or .NET, as well as scripting languages (shell, python, perl)* Design security-related functionality and verify proper implementation of new features.* Maintain awareness of up-to-date threat and vulnerability profiles.* Help define and evolve company-wide online security operations/procedures for large managed* Software-as-a-Service environments.Training:* Conduct internal security training classes for management, engineering, and QE.* Develop and organize training manuals, multimedia visual aids, and other educational materials.* Review threat models to create targeted trainingRequirements* Bachelor degree in computer science, engineering or a related discipline,* Between 5 to 7 years of experience working with web security, or an equivalent combination ofeducation and work experience;* Experience in web development using ActionScript, Java, JavaScript, ColdFusion, Ruby on Rails,PHP, and/or .NET, as well as scripting languages (shell, python, perl) - this is a hands-on positionwhich will involve building security test tools for delivery to and use by other teams.* Familiarity with browser, web service, and operating system security concepts;* Good analytical ability;* Strong written and oral skills in English; (will occasionally interface with senior management)* The ideal candidate must be able to convey complex security issues and risks while maintaining apositive relationship with product teams* Minimal travel requiredIdeal:* Knowledge of Adobe technology (Flash Player, Reader, ColdFusion, etc.)Adobe''s dynamic working environment is well known - including 12 years onFORTUNE magazine''s "100 Best Companies to Work For", and other, similar accolades. Recognizing that employees are at the core of our success, Adobe recruits and retains highly qualified and motivated individuals, creates an environment where they can innovate and achieve their best, and rewards them for their performance by giving them an opportunity to share in the company''s suc
KEY REQUIREMENTS:
Not stated