Jobs    Everything

Select a Metro Area
Get ready for summer internships

Get ready for summer internships

Next week, May 20, sees the 2nd Annual NAF Mega Student Industry Conference of Miami Dade County Public Schools’ NAF Academies of Finance, Engineering, Information Technology, Health Sciences, Hospitality and Tourism. The conference creates pathways to success for students through insightful sessions and internship interviews directly with industry professionals. You are invited to Interview Interns at the 2015 NAF Annual Student / Industry Conference – post your company’s internship positions and schedule on-site interviews through the GetMyInterns.org app.

If you would like ot learn more, please contact me: Alex@SherlockTalen.com

Top Job Pick – 6 Month Assignment for Windows Security Engineer – Miami

Top Job Pick – 6 Month Assignment for Windows Security Engineer – Miami

Apply to this job.

Our Miami based client has a 6 month assignment for a local IT Security Engineer responsible to implement and project manage Information Security related infrastructure projects

Position Requirements:
• Bachelor’s degree in a IT related discipline required
• 5+ years’ experience in systems and network engineering that is both deep and broad.
• Combination IT Engineering and Project Management skills
• Lead design delivery of large-scale, high-quality systems focused on IT infrastructure
• Deep hands-on design and deployment expertise with massive global networks, complex distributed systems architectures, and automation of network infrastructure
• Attention to detail and organizational skills
• Experience with agile development methodology

SherlockTalent loves to share our $500 referral bonus.

Recruiting? Beware malware-infected job applications

Recruiting? Beware malware-infected job applications

Many thanks to our friend Michael Scheidell of Security Privateers for alerting the Tech Hiring community to this danger.

The current shortage of qualified IT security professionals is affecting organizations across the United States, but now it seems that criminals are taking advantage of the booming job market in a new way: Proofpoint reports that cyber criminals have been infecting businesses with malware through fake job applications.

Combining “phishing and social engineering techniques in order to trick users into opening a malicious document”, criminals have been uploading infected files to online job site CareerBuilder.com, which exploit “a memory corruption vulnerability for Word RTF (such as CVE-2014-1761CVE-2012-0158, and others).”

It may seem a labor-intensive way of attacking organizations, but because of this approach the “probability of the mail being delivered and opened is higher”. As Proofpoint notes, “recipients are likely to read them and open the attachments because not only are they legitimate emails from a reputable service, but these emails are expected and even desired by the recipient. Moreover, because of the way that resumes are circulated within an organization, once the document has been received by the owner of the job listing (often “hr@<company name>”) it will be sent to the hiring manager, interviewers, and other stakeholders, who will open and read it as well. Taking advantage of this dynamic enables the attackers to move laterally through their target organization.”

Having been alerted by Proofpoint, CareerBuilder “took prompt action to address the issue”, but other recruitment sites could still be vulnerable. We recommend you exercise caution when opening attachments from unknown sources – especially if you’re recruiting. Once infected with malware, organizations are at significant risk of data breach, or wider compromise.

by: Neil Ford