FIPS Certifications Analyst

Corsec Security • Fairfax, VA, US, VA

83d • $60,000 - $75,000 • Onsite

About The Position

Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-3, CC and DoDIN APL certifications. We are looking for an entry-level, full-time Information Security Analyst to join our team. This role involves product certification support for the FIPS 140 Consulting Team.

Requirements

• Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods.
• Knowledge of secure communications protocols, including TLS, SSH, and IPsec.
• Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline.
• Strong analytical and technical skills - Ability to assess IT products and components with great attention to detail, especially in relation to the uses of cryptography within a system.
• Strong technical writing skills.
• Strong oral presentation skills - Ability to articulate in technical and non-technical terms to customers, peers, and management.
• Strong organizational and prioritization skills.

Nice To Haves

• Experience with project management.
• Experience with government certification processes, especially FIPS 140-3.
• Familiarity with the NIST SP 800 series publications, beyond SP 800-53.

Responsibilities

• Examine IT products against security certification standards in order to determine and document compliance gaps.
• Understand and analyze cryptography within an IT system.
• Analyze design, architecture and implementation details of IT products and produce technical documentation specific to security certifications.
• Configure IT products to meet compliance requirements and produce certification-specific deployment guidance.
• Author evaluation documentation for submission to testing labs and certifying authorities.
• Produce testing reports by conducting functional, operational, and vulnerability testing of the IT products.
• Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments.
• Manage project schedules.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level