Trustwave is a leading provider of compliance, Web, application, network and data security solutions delivered through the cloud, managed security services, software and appliances. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its TrustKeeper® portal and other proprietary security solutions. Trustwave has helped hundreds of thousands of organizations--ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers--manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices worldwide.

SpiderLabs is the advanced security team responsible for application security, incident response, penetration testing, physical security and security research for Trustwave's clients. In addition, SpiderLabs performs 3rd party security reviews and intelligence for Trustwave's products and provides and security thought leadership to the entire organization. SpiderLabs has responded to hundreds of security incidents, performed thousands of penetration tests and security tested hundreds of business applications for some of the largest organizations in the world. Members of SpiderLabs are frequently asked to speak at security conferences around the world. SpiderLabs has research facilities in Chicago, Sao Paulo, London, Israel, Sydney and Auckland.

Security Researcher – Vulnerability Assessment Team (VAT)

The Security Researcher is responsible for tracking new vulnerabilities, identifying how those vulnerabilities are exploited and writing code that detects the presence of or exploits those vulnerabilities. The Security Researcher has experience in network and application protocols and vulnerability research.

Responsibilities:

• Write vulnerability checks for our vulnerability scanning technology
• Participate in peer code reviews

Requirements:

• Proven people management skills
• Strong knowledge and experience with TCP/IP networking and packet-level analysis.
• Experience with development in high-level languages like Ruby, Python, Java or C#
• Linux/Unix knowledge is a must
• Ability to work under tight deadlines with creativity
• Self-motivated, independent and able to understand complex systems
• Must possess strong written and verbal communication skills
• Preferred to be located within the Chicago-land area, though we will consider remote candidates

Additional Plus Competencies:

• Strong knowledge and experience with the Ruby programming language is desirable
• Experience with analyzing C/C++, Java, PHP, and other languages are a plus
• Experience with object-oriented programming concepts and techniques
• Experience researching, reversing, and implementing both open and proprietary network application protocols.
• Experience with vulnerability discovery and disclosure, as well as proof-of-concept exploit development
• Experience with source code management tools such as git or Subversion.
• Experience and/or willingness to present at security conferences like DEFCON, BlackHat, etc.
• Experience and/or willingness to write technical blog posts (See http://blog.spiderlabs.com/)

Education:

We prefer college-educated applicants, but at minimum, high school diploma or equivalent is required for employment.

Trustwave is an Equal Opportunity Employer of Minorities, Females, Protected Veterans, and Individuals with Disabilities.