Senior Information Security Analyst

We are seeking an experienced Info Security Analyst IV to support FIPS 140 validation projects within a hands-on lab environment. This role focuses on security analysis, cryptographic validation testing, product evaluations, automation, and technical reporting in support of National Defense initiatives. The ideal candidate will have strong experience in cryptographic technologies, testing methodologies, and security engineering, along with a mandatory Cryptographic Validation Program (CVP) Certification. Key Responsibilities Support and execute FIPS 140 validation projects Perform general security analysis and vulnerability testing Conduct physical security testing and system-level logical analysis Evaluate products against Technology Type standards Perform cryptographic and Public Key Infrastructure (PKI) testing Execute cryptographic algorithm testing Develop technical reports and documentation Automate testing through scripting Develop applications to support test cases Assist with product architecture and design analysis Build and maintain testing environments Analyze and troubleshoot security-related issues Required Technical Skills MUST HAVE Cryptographic Validation Program (CVP) Certification Knowledge of cryptographic concepts and technologies, including: Cryptographic encryption algorithms Key exchange algorithms Hashing and message authentication algorithms PKI Experience with programming languages such as: C C++ Python Java Experience with testing automation and scripting Understanding of security standard requirements and product compliance Experience with networking concepts including subnetting and routing Knowledge of security protocols including: SSH IPsec TLS Experience building testing environments and documenting results Strong troubleshooting and problem-solving skills Strong multitasking and time management skills Preferred / Nice-to-Have Skills Experience working in a lab environment Experience with Python programming Experience with debugging tools such as: WinDBG Visual Studio Experience with entropy source statistical analysis Knowledge of: OpenSSL OpenPGP Active Directory X.509 certificate validation Vulnerability analysis and penetration testing experience Related certifications: CCNA / CCNP / CCIE JNCIA / JNCIS / JNCIP / JNCIE Hands-on experience with hardware testing tools such as: Multi-meter Signal generator Local to Columbia, MD area Qualifications & Experience Typically requires 2–4 years of relevant experience Strong written and verbal English communication skills Ability to work onsite in a collaborative lab setting Previous experience supporting security validation projects preferred About the Team / Company The role supports the Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team in a collaborative onsite environment focused on National Defense and cybersecurity initiatives. The team consists of 12 team members and 3 project managers supporting secure communications and product validation efforts. #J-18808-Ljbffr