At 6:15 PM -0500 1/3/07, McGovern, James F (HTSC, IT) wrote: > We have had open job postings for security architects for a long time > with zero hits and I would love to understand how other enterprises are > hiring practitioners.
You might consider consulting your tool vendor. Praxis does work on a consulting basis with Spark Inspector, but they might also have some insights on where to find people who understand the methodology. But if your goal is to prop up existing code, you might have a much harder row to hoe. Presuming a totally knowledgeable potential pool of workers, they are going to know enough to avoid volunteering for an assignment which is essentially "do the impossible". -- Larry Kilgallen _______________________________________________ Secure Coding mailing list (SC-L) SC-L@securecoding.org List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l List charter available at - http://www.securecoding.org/list/charter.php SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com) as a free, non-commercial service to the software security community. _______________________________________________