Security Assurance Engineer

FactSet is currently looking for a Security Assurance Engineering within our Security Assurance group.  The Security Assurance Group works with Software Engineering, Systems Engineering, and Product Development in order to design, develop, test, and deploy secure products for our customers. Application security testing and managing subsequent remediation projects will be a large portion of your responsibilities. As many of a security assurance engineer’s duties involve direct communication with vendors, internal clients and stakeholders, good communication skills are a must.  A successful candidate for this role will have strong organizational and interpersonal skills.  Essential Job functions:· Lead and collaborate on intra-group projects to securely design applications, systems, and networks.· Identify potential risks, threats, vulnerabilities and exploits through security assessments and penetration testing; produce remediation proposals.· Propose, develop and improve tools to automate security testing as well as enable more efficient discovery, tracking, and resolution of security incidents.· Monitor and respond to security alerts and incidents; devise and implement mitigation techniques.· Participate in designing, applying and enforcing security policy throughout the firm.· Collaborate with Security Team to design and implement secure infrastructure solutions.· Review proposed changes in the technology environment for security implications. Verify security-related functionality and verify proper implementation of new features.· Educate employees on security-related best practices.· Willing to work as part of a team providing 24x7 coverage (some participation in pager rotation). A Successful candidate will demonstrate proficiency in some or all of the following areas:· BS or MS in Computer Science or Engineering, Information Systems, or equivalent.· 2+ years security engineering experience.· Excellent interpersonal and teamwork skills.· Must be a self-starter and have excellent communications skills, both verbal and written. Able to deliver results in a high-energy/high-pressure environment.· Multitasking and prioritization of many projects, issues, tasks.· Strong customer focus and desire to assist clients; thorough, detail-oriented and quality-driven.· Industry training and/or certification preferred:  SANS/GIAC, CISSP.· Able to troubleshoot complex technical problems.· Ability to read, analyze and identify security flaws in C, C++, J2EE or .Net programs.  · Some experience with scripting languages such as Bash, Perl or Python.· Some system administration and troubleshooting skills in Windows, Linux or Unix.· Experience with security testing tools such as Nessus, Nitko, Metasploit, Paros/Webscarab.· Strong knowledge of TCP/IP and security protocols such as HTTP(S), DNS, SMTP, SSH, IPSEC and general cryptography techniques.· Fundamental understanding of security-related systems such as firewalls, IDS/IPS, SIMs, AAA. FactSet is a leading provider of global financial and economic information. Combining hundreds of databases into our own dedicated online service, FactSet offers instant access to accurate financial data and analytics to thousands of global investment professionals with solutions for company, portfolio, market, fixed income, and investment analysis.To find out more about the opportunities FactSet has to offer you, please log on to our website at www.factset.com/careers.FactSet Research Systems Inc. is an EOE/M/F/D/V Employer which strongly supports diversity in the workforce. Click here to see all "Company Name" opportunities