Security Reviewer, Protocol Specifications

Review the security parts of the ECM Protocol specifications, including the security specification and the transport bindings, and write down the threats and controls that each one must state. This role is with ECM Protocol (ecmprotocol.com). Nice to have: Experience reviewing standards or protocol documents. Experience with the security of servers that give data to language models.

Review the security specification and the transport binding documents for missing threats, unclear requirements and weak defaults. Check that the message format and extension documents state how identity, access and data handling must work. Write the threat model sections that a document needs and the security requirements for an implementer. Review the security and compliance articles for claims that are wrong or out of date. Record each finding with the document, the section and the fix that you propose.

Experience in application security, protocol design or security review. Ability to read a specification and find gaps in its security requirements. Clear, exact technical writing in English.