<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns:st1 = "urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=648433820-22012004>Sorry
for the many job postings recently. Here is another for a very interesting
security position in the US. If anybody is interested, please contact Rob
McIntosh directly (email is in the cc).</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=648433820-22012004></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=648433820-22012004>Gruss,
Christof Paar</SPAN></FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Ursprüngliche Nachricht-----<BR><B>Von:</B> Rob McIntosh
[mailto:rmcint@microsoft.com]<BR><B>Gesendet:</B> Mittwoch, 21. Januar 2004
17:19<BR><B>An:</B> Christof Paar<BR><B>Betreff:</B> RE: Need your help re
Hardware Security @ Microsoft..<BR><BR></FONT></DIV>
<DIV dir=ltr align=left><SPAN class=944591716-21012004><B><SPAN
style="FONT-WEIGHT: bold; FONT-SIZE: 10pt"><FONT
face=Arial></FONT></SPAN></B></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=944591716-21012004><B><SPAN
style="FONT-WEIGHT: bold; FONT-SIZE: 10pt"><FONT face=Arial>Program
Manager<SPAN class=213560300-08012004>(</SPAN>NGSCB <SPAN
class=213560300-08012004>- Hardware Security)</SPAN></FONT></SPAN></B></DIV>
<DIV dir=ltr align=left>
<P class=MsoPlainText><FONT face=Arial><SPAN style="FONT-SIZE: 10pt">Come work
on exciting new initiatives at Microsoft! The security compliance program
manager builds a framework to promote good 3rd party implementations of our
security technology. Specifically, you will be defining technical requirements
for hardware partners who are helping to build the Next Generation Secure
Computing Base (NGSCB, http://www.microsoft.com/ngscb). NGSCB is new security
technology for the Microsoft Windows platform that uses a unique hardware and
software design to provide strong security and privacy protections in an
interconnected world. Your program will define security compliance
requirements for new hardware components that will support the NGSCB
architecture. The components include chips, motherboards, I/O devices and
graphics processors. How do you help our partners? You have the following
responsibilities: Work with the technical team to develop threat models for
NGSCB implementations, identify and specify mitigating behaviors for these
threats, and incorporate these in technical specifications; ensure that other
product documentation, tools and communications reflect the security
compliance program/requirements; build an overall framework for expressing and
evaluating these threats and mitigations, working with stakeholders to define
and set quality bar(s) that IHV partners could meet prior to receiving
enabling technology; determine how partners would “prove” meeting the quality
bars; help drive the test function’s development of supporting test tools;
promulgate information inside and outside the company; represent the
compliance program and its requirements to internal and external stakeholders,
incorporating feedback in program design and promoting adoption of our
framework (this could include representing the company in a working group of a
standards body and working with OEMs developing NGSCB hardware); work with
internal stakeholders to define and roll out the overall compliance program
for NGSCB, helping set strategy and policy in this area; own the technical
vision for NGSCB security compliance. We’re looking for an experienced
technical Progam Manager with at least an undergraduate degree in computer
science and a minimum of three years working on the Windows client platform
and PC architecture, including involvement shipping hardware product. In
addition to having a strong technical background, this person must be a
self-starter, a strong written and oral communicator, and able to work
effectively across organizations. You will be required to travel ~20% of the
time (mostly domestic). Familiarity with common computer security
attacks/concepts would also be highly beneficial but is not
required.</SPAN></FONT></P>
<P class=MsoPlainText><FONT face=Arial><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004>Bottom Line:</SPAN></SPAN></FONT></P>
<UL>
<LI>
<DIV class=MsoPlainText><FONT color=#0000ff><FONT face=Arial><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><SPAN
class=213560300-08012004>A</SPAN>dvanced degree in electrical engineering
(preferred) <SPAN class=213560300-08012004>or c</SPAN>omputer
science.</SPAN></SPAN></FONT></FONT></DIV>
<LI>
<DIV class=MsoPlainText><FONT color=#0000ff><FONT face=Arial><SPAN
style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004></SPAN></SPAN></FONT></FONT><FONT
color=#0000ff><FONT face=Arial><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004><FONT color=#0000ff>Exp working as a Architect
focused on hardware development, including chips, motherboards, peripheral
devices (e.g. input/output devices like mice, keyboards) and graphics
(processor, renderer) and has deep understanding of how these components
interact with operating system.</FONT></SPAN></SPAN></FONT></FONT></DIV>
<LI>
<DIV class=MsoPlainText><FONT color=#0000ff><FONT face=Arial><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><SPAN
class=213560300-08012004>Must have exp f</SPAN>ocus<SPAN
class=213560300-08012004>ing</SPAN> on PC client architecture; familiarity
with Windows OS<SPAN class=213560300-08012004> a benefit (Security at the
OS/Hardware level)</SPAN></SPAN></SPAN></FONT></FONT></DIV>
<LI>
<DIV class=MsoPlainText><FONT color=#0000ff><FONT face=Arial><SPAN
style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004></SPAN></SPAN></FONT></FONT><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff>Participation in standards body
would <SPAN class=213560300-08012004>be
benficial.</SPAN></FONT></FONT></SPAN></SPAN></DIV>
<LI>
<DIV class=MsoPlainText><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004></SPAN></FONT></FONT></SPAN></SPAN><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004>Candidate
h<FONT color=#0000ff>as to be willing to be very hands on in development of
technical security requirements, capturing those in documentation
(Architecture &
requirements)</FONT></SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN></DIV>
<LI>
<DIV class=MsoPlainText><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004></SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004>Experience
working with external stakeholders (OEMs/ODMs and hardware partners)
on compliance programs will be a distinct
advantage.</SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN></DIV>
<LI>
<DIV class=MsoPlainText><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004></SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN><SPAN
style="FONT-SIZE: 10pt"><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004><FONT
face=Arial><FONT color=#0000ff><SPAN class=213560300-08012004>Experience
working with product groups and product
management/marketing.</SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN></DIV>
<LI>
<DIV class=MsoPlainText><SPAN style="FONT-SIZE: 10pt"><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004><FONT face=Arial><FONT color=#0000ff><SPAN
class=213560300-08012004>Exp working in a senior role where
impacting/infulencing decision makers/groups without direct authority is a
must</SPAN></FONT></FONT></SPAN></FONT></FONT></SPAN></SPAN></DIV></LI></UL></SPAN></DIV><SPAN
class=109031721-20012004><FONT face=Arial color=#0000ff size=2>
<DIV> </DIV>
<DIV></FONT></SPAN>
<P><FONT size=2>============================================<BR>Prof. Christof
Paar<BR>Chair for Communication Security<BR>Dept. of Electr. Eng. &
Information Sciences<BR>Ruhr-University Bochum<BR>44780 Bochum,
Germany<BR><BR>URL: <A
href="http://www.crypto.rub.de">www.crypto.rub.de</A></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>