Security Engineer (FIPS 140)

Maxtena Inc•Germantown, MD

About The Position

The Security Engineer will work in the growing IT security field in support of National Defense. The products supported are deployed within larger systems to facilitate secure communications for the military in the modern cyber warfare environment. The role covers security analysis, product architecture and design, coding, testing, debugging, quality assurance, open-source assessment, and post-production support.

Requirements

Must be a U.S. citizen with the ability to obtain a Secret clearance.
Bachelor's degree in Computer Science, Computer Engineering, or Electrical Engineering.
At least 6 years of related development experience.
Experience with Trusted Execution Environment (TEE).
Familiarity with OpenSSL, Linux, and statistical analysis of entropy sources.
Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing and message authentication algorithms, PKI, random number generators, and related topics.
Experience with programming languages such as C, C++, Python, or Java, as well as development environments.
Ability to understand security standard requirements and apply them to products.
Experience setting up networks and familiarity with subnetting and routing concepts.
Knowledge of common security-related protocols and their design, such as SSH, IPsec, TLS, and MACsec.
Experience building testing environments, conducting tests, and reporting results through technical writing.
Strong troubleshooting and problem-solving skills.
Strong multitasking and time-management abilities.

Responsibilities

Act as a FIPS 140 validation subject matter expert across projects.
Perform general security analysis, vulnerability testing, and physical security testing.
Contribute to product design, including product architecture.
Perform system-level logical analysis.
Evaluate products against technology-type standards (Protection Profiles).
Conduct cryptographic, Public Key Infrastructure (PKI), and algorithm testing.
Conduct source code reviews.
Write and review technical reports.
Automate testing procedures using scripting.
Develop applications to support test cases.
Design, develop, code, test, and debug system software.
Integrate and validate new product designs.
Provide ongoing post-production support, re-evaluation, and recommendations for product improvements.
Interface with hardware design and development.
Assess third-party and open-source software.