FIPS 140 Security Engineer (Must have Cryptographic Validation Program (CVP) Certification)

Job Title: FIPS 140 Security Engineer

Location: Columbia MD

Duration: 6 + months Contract

Must have Cryptographic Validation Program (CVP) Certification

What You Will Get to Do:
- The selected candidate will work on varied FIPS 140 validation projects.
- General security analysis
- Design work (product architecture)
- Vulnerability testing
- Physical security testing
- System-level logical analysis
- Product evaluations against Technology Type standards
- Cryptographic and Public Key Infrastructure (PKI) testing
- Cryptographic algorithm testing
- Source code review activities
- Technical report writing and review.
- Testing automation through scripting
- Develop applications to support test cases.

You Will Bring These Qualifications:
- Cryptographic Validation Program (CVP) Certification
- Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
- Experience with various programming languages (C, C++, Python or Java) and development environments.
- Ability to comprehend security standard requirements and apply them to products.
- Experience setting up networks and familiarity with subnetting and routing concepts.
- Knowledge of common security related protocols and their design (i.e. SSH, IPsec, TLS, etc.).
- Experience building testing environments, performing testing and reporting results (technical writing).
- Strong troubleshooting and problem-solving skills.
- Strong multitasking and time management.

These Qualifications Would be Nice to Have:
- Local to Columbia, MD area.
- Experience with Python programming language
- Experience with debugging (Android debug bridge (adb), WinDBG, Visual Studio, etc.).
- Experience with statistical analysis of entropy sources.
- Knowledge of OpenSSL and/or OpenPGP.
- Vulnerability Analysis and/or penetration testing experience/expertise.
- Strong knowledge of computer security principles and best practices.
- Strong English (both oral and written) skills.
- Related certifications (CCNA/CCNP/CCIE, JNCIA/JNCIS/JNCIP/JNCIE).
- Knowledge of Active Directory and Linux.
- Hands on experience using tools such as an oscilloscope, function generator, multi-meter, signal generator, etc.
- Knowledge of X.509 certificate validation.

EDUCATION & EXPERIENCE:
- Typically requires a BS degree with 2 - 4 years of prior relevant experience.