Call: +44 (0)1904 557620 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "10g and 11g password leak during install, honeypots and databases exposed to the internet"] [Next entry: "Personal details for 25 Million people go missing in the UK"]

Would you like a job in Oracle security - PeteFinnigan.com Limited is hiring



Due to unprecedented success in our company since I re-started it last August ( see Pete Finnigan is now an independent and available for Oracle security work ) we are looking to hire someone to help me deliver Oracle Security consultancy, training, products and associated services.

I am looking for someone with energy and excitement for database security, someone who knows Oracle database technology well already. You don't need to be a DBA or a developer but you must understand the complete architecture and how the products tick. This is important; let me give an example; to provide security services its not enough to simply tick the boxes and check parameters, you need to understand how those parameters affect the database, the applications running on them, why do you need to know? - Because every installation is different and every application working with the database is different. So you find a parameter that’s not set to a secure value, in some cases its not a simple case of setting it to its known secure value, this has been known to break applications (lets not get into the whys and wherefores of whether that’s good design or bad!) so you need to know how Oracle works so that alternate mitigating counter-measures can be suggested, designed and deployed as well for the best solutions for our customers.

I am looking for someone who knows Oracle well; but also someone who knows security and understands security ideally in the Oracle database environment. Secondary to this is the need to understand the security features provided by the Oracle database product set.

The job will also include the opportunity to write papers for speaking events, writing for this blog; therefore writing skills are important but for me the more important thing is passion for learning and passion for what we are doing and I am willing to train and bring up to speed the right person.

The job will also entail all types of Oracle security based consultancy; security audits, design work, specialist work around things like VPD, OLS, ASO, design of audit trails, Oracle database breach investigations and much more. It will also involve pre-sales, proposal writing, teaching and products.

Ideally I am looking for someone based in the north of England but don't let this limit you, I am not asking you to move house as the business we have is very spread out and we need to go where the client is but being closer to our base would make communications easier.

You must already have the right to work in the UK; in the future we may relax this but at the moment we cannot afford the efforts to help with business visa's etc to bring anyone in from abroad.

I believe that this is a great opportunity for someone out there, all you need to do is email me on pete _at_ petefinnigan _dot_ com with your CV and we can arrange a first interview.

Please no agencies, you will be wasting your time as well as mine as I will not respond to any agencies, I want to talk to individuals directly.