NETSCOUT

About NETSCOUT

Product Security Assessment Engineer NETSCOUT (NASDAQ: NTCT) is a world leader in Network Service Assurance and Network Security. Our products deliver multi-purpose, real-time visibility, troubleshooting, and protection wherever your technology infrastructure and business applications reside. Our extensive portfolio includes products for service assurance, troubleshooting, diagnostics, business analytics, DDoS protection, and threat intelligence. As Product Security Assessment Engineer, it will be your responsibility to perform static and dynamic testing on NETSCOUT’s products using a variety of testing tools, provide feedback on third-party security evaluations, and assess customer vulnerability reports. This position offers the right candidate an opportunity to play an instrumental role in ensuring the success of the research and development teams at NETSCOUT. Positive, practical candidates who thrive in an atmosphere of shared trust and independence will discover an ideal work culture. This position reports to the Engineering Services Manager and is preferably based out of Westford, MA. Responsibilities The Product Security Assessment Engineer is responsible for the following: Application testing Run dynamic application security testing (DAST) tools Run static analysis tools (e.g. - Brakeman) Assist with third-party security evaluations Triage and summarize findings and open bugs where appropriate Review Customer inquiries Review pen test reports from customers Provide feedback on specific vulnerabilities in third-party software and their impact on products Review vulnerability reports from independent security researchers Vulnerability research Keep up-to-date on vulnerabilities in third-party software utilized in NETSCOUT products Determine impact of vulnerabilities on products Coordinate fixes with product teams Secure Software Development Lifecycle Review code changes from developers that have a potential security impact Provide input on properly addressing/fixing security issues found Provide a consulting/advisory role to product teams for any security-related matters 3+ years or equivalent experience specifically in network security vulnerability testing and/or research Knowledge of common vulnerability classes in web applications, including the OWASP Top Ten Experience reviewing code in a variety of programming languages for security vulnerabilities Familiarity with security testing tools such as: Burp Suite Rapid7 AppSpider HP WebInspect Arachni Brakeman Understanding of static analysis and its use to find security issues in code Good understanding of software development lifecycle, background in software development Excellent verbal and written communication skills BS or BSE in computer science/engineering, or equivalent experience Desire to work independently and proactively on security related issues Familiarity with Security Maturity Models and Secure SDLC Knowledge of common vulnerability classes in specific programming languages (PHP, Python, C, Ruby, JavaScript, HTML5) Basic understand of cryptography and related topics such as TLS and PKI CISSP or CISM certification Socket programming and TCP/IP networking knowledge Linux/Unix systems administration experience Experience with JavaScript, CSS, PHP and/or mod_wsgi web development Experience with TCP/IP networking and common WAN routing protocols Experience with Bugzilla, JIRA or similar defect tracking system Experience with reverse engineering tools Experience with open source relational databases (MySQL, PostgreSQL) Experience with Git, CVS, or SVN source control Ability to provide presentations and training on policies, tools and security best practices Requirements: Education Bachelors (or equivalent work experience) Job Type Full-Time Location MA - Westford, United States (US), US-Massachusetts (MA) Preferred Language English NETSCOUT Is an Equal Opportunity and Affirmative Action Employer NETSCOUT is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, national origin, disability or protected veteran status. NETSCOUT endeavors to make netscout.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact Talent Acquisition at 978-614-6294 or by email. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. For job candidates in the US, NETSCOUT participates in the E-Verify program to confirm work authorization. For more information on E-Verify, please refer to the E-Verify and Right to Work notices. For our US EEO Policy Statement, please click here. If you’d like more information on your EEO rights under US law, please click here.

Synonyms

Technologies (from Job Ads)

Hiring Locations

Headquarters

Loading map...

Company Info

Legal Form: Inc

Company Type: Public

Company Size: 1001 - 5000

Revenue: 1 - 5 billion (USD)

Job Ad Metrics

Job Ads found: 176

Job Ads per Month: 4.8

Hiring Locations: 8

Data Info