FIPS 140 Entropy Specialist

Leidos•Columbia, MD

13d•$87,100 - $157,450•Onsite

About The Position

The Cryptographic Security Testing (CST) Lab within Accredited Testing and Evaluation (AT&E) at Leidos currently has an opening for a FIPS 140 Entropy Specialist. This is a technical position within CSTL. The FIPS 140 Entropy Specialist acts as a Subject Matter Expert in the field of entropy within the scope of the Entropy Source Validation (ESV) program run by the NIST and is expected to lead entropy sources through all phases of work in order to achieve ESV certification.

Requirements

Minimum Bachelor of Science in Mathematics, Computer Science, Computer Engineering or related technical discipline.
Expert knowledge of SP 800-90B and entropy related requirements from FIPS Implementation Guidance (IG).
Familiarity of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
Experience with various programming languages (C, C++, Python or Java) and development environments.
Ability to comprehend security standard requirements and apply them to products.
Knowledge of common security related protocols and their design (i.e. SSH, IPsec, TLS, etc.).
Experience building testing environments, performing testing and reporting results (technical writing).
Strong problem-solving skills.
Strong multitasking and time management.

Nice To Haves

CVP certification is not required for this role, however, it is highly recommended and should be pursued to enhance skills and career development within the field.

Responsibilities

Analysis of entropy sources against NIST Special Publication (SP) 800-90B
Statistical testing of noise datasets
Review of entropy assessment reports and public use documents
Submission of ESV packages through the NIST Entropy Source Validation Test System (ESVTS)
General security analysis
Cryptographic algorithm testing
Source code review activities
Test case development/execution
Technical report writing and review