Sr. Application Security Consultant

The mission of VeriSign® Global Security Consulting (GSC) is to blend unmatched security expertise with world-class business and program management in order to provide comprehensive enterprise security solutions to our clients. Our experts combine business driven approaches with technology expertise in order to deliver maximum client satisfaction. VeriSign security consultants average 10 years of experience. They are professionals who have actually experienced real-world security and compliance implementations. http://www.verisign.com/global-consulting/security-consulting/index.html VeriSign is seeking motivated and knowledgeable Application Security Consultant to join our Global Security Consulting Organization in the North Carolina area.  This is a Full time (remote/ home office based) employment opportunity with VeriSign, Inc. This position requires business travel: candidates must be flexible, willing and able to travel for business purposes when needed at least 25% up to 50%. (Monday - Friday, travel varies and based on client requirements)POSITION DETAILS Individual may have other roles assigned as needed, but focus will be on web and black box application security testing. Job requires a strong information security, privacy, and risk management background along with excellent written, verbal, and presentation skills.Requirements: 3+ years of direct experience with application testing. Deep familiarity with core application testing principles. In depth understanding of TCP/IP fundamentals. Solid understanding of programming languages used in common application environments. Knowledge of and ability to review code of both script languages (i.e. HTML, Javascript, PHP, Perl, ASP, etc.) and compiled languages (i.e. Java, C/C++) is essential. Strong knowledge of network infrastructure design principles including routers, firewalls, proxies, IDS and load balancing devices. Comprehension of at least one major development platforms (i.e. .Net, J2EE, ColdFusion) Knowledge of common web server platforms and underlying operating systems. Experience using common freely available security scanners and proxy tools. Experience with commercial web application testing tools a plus. Additional Qualifications: A passion for Information Security. The ability to think 'outside the box' and formulate complex security test cases. Working knowledge of application exploitation including implementing Cross Site Scripting and SQL injection attacks, as well as remediation procedures for addressing any issues. The capability to work in diverse teams and independently. Possess industry certifications such as CISSP or GIAC. 4 year college degree