<?xml version="1.0" encoding="UTF-8"?>
<org.eclipse.epf.uma:RoleDescription xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:org.eclipse.epf.uma="http://www.eclipse.org/epf/uma/1.0.6/uma.ecore" xmlns:epf="http://www.eclipse.org/epf" epf:version="1.5.1" xmlns:rmc="https://www.ibm.com/us-en/marketplace/rational-method-composer" rmc:version="7.5.1" xmi:id="-KboadtLqYUrSu6GAl-ON2g" name="security_auditor,_0NZNUAZiEd2FwrEz_Q9ftg" guid="-KboadtLqYUrSu6GAl-ON2g" changeDate="2008-06-26T11:38:15.140-0700" version="7.5.0">
  <mainDescription>A Security Auditor is usually&amp;nbsp;a member of a Security team who is responsible for conducting security assessments of&#xD;
various IT applications. This role is held by an experienced security professional who has a good understanding of the&#xD;
various IT security threats and is able to assess if a particular IT asset (in this context, a Web application) is&#xD;
vulnerable to those threats.</mainDescription>
  <skills>&lt;p>&#xD;
    The person&amp;nbsp;in this role should have these skills:&#xD;
&lt;/p>&#xD;
&lt;ul>&#xD;
    &lt;li>&#xD;
        Deep&amp;nbsp;understanding&amp;nbsp;of security testing approaches and techniques&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Very good understanding of Web application security&amp;nbsp;&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Debugging and diagnostic skills in the security domain&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Knowledge of the types of systems and applications&amp;nbsp;under test&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Knowledge of the networking architecture&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Training in the use of the security test automated tools&#xD;
    &lt;/li>&#xD;
    &lt;li>&#xD;
        Experience using the security test automated tools&#xD;
    &lt;/li>&#xD;
&lt;/ul></skills>
</org.eclipse.epf.uma:RoleDescription>
