Available positions (as of 01/10/2016):

1. Information Security Analysts
Cryptoforensics Technologies is looking for consultants who will perform and coordinate information security workflow as assigned. Work activities may include performing third-party information security reviews, conducting surveys and data management around clients' information security risk assessment (ISRA) program, and participating in moderate to high-complexity information technology projects to ensure that risk assessments include a consideration of cybersecurity. Successful candidates will be responsible for analyzing information systems to evaluate key controls and residual risks, and performing testing of controls for design and operating effectiveness to assess risk. May participate as an information security subject matter expert in technology management processes, including change management, problem management, vulnerability management, and patch management.

2. Application Security Specialists
Cryptoforensics Technologies is looking for expert Network Security consultants to join our team that conduct ethical hacking exercises. Successful candidates will find and validate security vulnerabilities in target systems, networks, and applications in order to help our clients. We are looking for well-rounded and strong information security experts. Network security experience is a must, with a background in penetration testing in a major development company or a security consulting company. If you really enjoy finding vulnerabilities this is the job environment for you.

Essential qualifications (in addition to the requisite academic qualifications):

• Must have three to six years of recent information systems security experience performing security assessments.
• Certification(s) such as CISA, CISSP, OSCP, OSCE, QSA, GIAC (or the willingness to obtain within the near future): Demonstrated knowledge of common network and host security vulnerabilities and standard remediation best practices.
• Ability to perform manual vulnerability verification techniques.
• Competency with network/application/database security, information security concepts and technologies: Prior experience working in an information security consulting role performing/leading PCI, GLBA, HIPAA, FISMA, SOX, ISO, etc. assessments.
• Excellent communication skills: Must be able to effectively communicate verbally and in writing, and must be able to work with clients and self-manage through difficult situations.
• Ability to work effectively both independently and on teams with strong problem-solving skills and attention to detail.
• Ability to explain complex security concepts to technical and nontechnical audiences, coupled with the ability to interact and provide constructive security remediation guidance as well as provide business-oriented outlook and recommendations.
• Ability to travel overnight up to 60 percent, depending on client locations