Automated Code Analysis + OSS Security Specialist with Research In Motion/RIM

Security Specialist - Automated Code Analysis + OSS

Research In Motion (RIM)/BlackBerry

Location: Waterloo, Ontario Canada

**Please apply directly to cataylor@rim.com **

Research In Motion Limited® (RIM)® is a world leader in the mobile communications market and has a history of developing breakthrough wireless solutions. RIM's portfolio of award-winning products, services and embedded technologies is used by thousands of organizations around the world and includes the BlackBerry® wireless platform, the RIM Wireless Handheld™ product line, software development tools and software/hardware licensing agreements. RIM is seeking driven individuals who can take our wireless data products to the next level in the global wireless market. Are you ready to make a difference in the world of mobile communications with RIM?

POSITION SUMMARY

The BlackBerry Security Team is a center of excellence working to ensure the ongoing security of our products and services for customers and partners worldwide. The security of BlackBerry products have always been among their strongest selling points, and RIM strives to provide the most secure, trusted mobile platform possible. To continue our tradition of excellence, we are looking for individuals in the security space who are knowledgeable, passionate, and experienced to join RIM. This is an opportunity to work for an industry leader in mobile security, one of the most challenging and interesting areas in computer science.

We are currently looking for a talented and passionate individual to actively track, test and manage the security of Open Source Software (OSS) components within BlackBerry. The work environment within BlackBerry Security is fast paced, highly dynamic and challenging. The successful candidate will conduct security assessments on OSS including a variety of analysis techniques and communicate recommendations based on their findings. They will also track and assist in the resolution of any issues found and work to promote secure engineering practices with respect to OSS within the development organization.

RESPONSIBILITIES

The successful candidate's responsibilities will include:

• Leading efforts to analyze OSS components for security vulnerabilities
• Monitoring and reporting on external information sources to uncover newly disclosed/ reported security issues
• Working with development to establish vulnerability management plans
• Proactively cultivating strong working relationships across the organization and OSS community, to ensure effective collaboration on resolving complex, time critical and potentially customer impacting security defects
• Prioritizing and coordinating overall OSS security activities, driving timely and effective identification and remediation of issues
• Tracking and reporting on efforts and progress to senior management
• Continually improving processes for identifying and managing security issues in OSS

ESSENTIAL SKILLS AND QUALIFICATIONS

• Understanding of common classes of software security vulnerabilities and how they manifest in source code
• Familiarity with automated code analysis tools such as Coverity, Fortify and Lint
• Programming experience in C/C++, Java and one or more of the following; Perl, Python, PHP, Ruby
• Strong written and verbal communication skills with both technical and non-technical audiences
• Cool under pressure - objective and diplomatic
• Able to work collaboratively with minimal supervision as part of a multi-disciplinary team

ADDITIONAL ASSETS

• Knowledge of BlackBerry products and services

If you're driven to take wireless technologies to the next level, it's time you join the team at RIM. We offer a challenging environment that fosters creativity and rewards excellence. Employees also have use of our award winning BlackBerry!

© 2010 Research In Motion Limited. All Rights Reserved. The BlackBerry and RIM families of related marks, images and symbols are the exclusive properties of Research In Motion Limited. RIM, BlackBerry, "Always On, Always Connected" and the "envelope in motion" symbol are registered with the U.S. Patent and Trademark Office and may be pending or registered in other countries.