FIPS 140 Security Engineer

FIPS 140 Security Engineer (Info Security Analyst III)

Remote

Join an Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team and gain an exciting opportunity to work in the growing IT security field in support of national defense. The products you will work with will be deployed into larger systems and deployments to facilitate secure communications in the modern cyber warfare environment. Be part of an expanding industry that is integral to ensuring national security. You'll have the chance to learn from industry experts, work with various Commercial off-the-Shelf products across multiple technologies, and apply your skillset in a hands-on lab environment.

Benefits of This Role:

• Performance-based career development with well-defined roles and actionable qualifications.
• Flexible hours within the workday.
• Opportunity to attend industry-related conferences and seminars.
• Work-life balance in an environment that values your health and time outside the workplace.
• Collaboration with industry experts in an open environment.
• Strong team camaraderie.
• Tuition reimbursement within appropriate disciplines.

What You Will Do:

• Work on varied FIPS 140 validation projects.
• Conduct general security analysis.
• Perform design work related to product architecture.
• Execute vulnerability testing and physical security testing.
• Conduct system-level logical analysis.
• Evaluate products against technology-type standards (Protection Profiles).
• Perform cryptographic and Public Key Infrastructure (PKI) testing.
• Conduct cryptographic algorithm testing.
• Review source code.
• Write and review technical reports.
• Automate testing through scripting.
• Develop applications to support test cases.

Qualifications:

• Cryptographic Validation Program (CVP) Certification.
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, and random number generators.
• Experience with programming languages (C, C++, Python, or Java) and development environments.
• Ability to comprehend security standard requirements and apply them to products.
• Experience setting up networks and familiarity with subnetting and routing concepts.
• Knowledge of common security-related protocols and their design (e.g., SSH, IPsec, TLS).
• Experience building testing environments, performing testing, and reporting results (technical writing).
• Strong troubleshooting and problem-solving skills.
• Strong multitasking and time management skills.

Preferred Qualifications:

• Experience with Python programming.
• Experience with debugging tools (Android Debug Bridge (adb), WinDBG, Visual Studio).
• Experience with statistical analysis of entropy sources.
• Knowledge of OpenSSL and/or OpenPGP.
• Experience in vulnerability analysis and/or penetration testing.
• Strong knowledge of computer security principles and best practices.
• Strong English communication skills (both oral and written).
• Related certifications (CCNA/CCNP/CCIE, JNCIA/JNCIS/JNCIP/JNCIE).
• Knowledge of Active Directory and Linux.
• Hands-on experience with tools such as oscilloscopes, function generators, multimeters, and signal generators.
• Knowledge of X.509 certificate validation.

Education & Experience:

• Typically requires a BS degree with 2-4 years of prior relevant experience.