FIPS 140 Security Engineer

Join our Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team to work in the growing IT Security field supporting National defense. Engage with products deployed in larger systems to facilitate secure communications for our military in the modern cyber warfare environment. This is an opportunity to learn from industry experts, work with various Commercial off-the-Shelf products across many technology types, and utilize your skillset in a hands-on lab environment., * Work on varied FIPS 140 validation projects

• Conduct general security analysis
• Engage in design work (product architecture)
• Perform vulnerability testing and physical security testing
• Conduct system-level logical analysis
• Evaluate products against Technology Type standards (Protection Profiles)
• Conduct cryptographic and Public Key Infrastructure (PKI) testing
• Perform cryptographic algorithm testing
• Engage in source code review activities
• Write and review technical reports
• Automate testing through scripting
• Develop applications to support test cases

• Cryptographic Validation Program (CVP) Certification
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Experience with various programming languages (C, C++, Python, or Java) and development environments
• Ability to comprehend security standard requirements and apply them to products
• Experience setting up networks and familiarity with subnetting and routing concepts
• Knowledge of common security-related protocols and their design (i.e., SSH, IPsec, TLS, etc.)
• Experience building testing environments, performing testing, and reporting results (technical writing)
• Strong troubleshooting and problem-solving skills
• Strong multitasking and time management skills, * Experience with Python programming language
• Experience with debugging (Android debug bridge (adb), WinDBG, Visual Studio, etc.)
• Experience with statistical analysis of entropy sources
• Knowledge of OpenSSL and/or OpenPGP
• Vulnerability analysis and/or penetration testing experience/expertise
• Strong knowledge of computer security principles and best practices
• Strong English (both oral and written) skills
• Related certifications (CCNA/CCNP/CCIE, JNCIA/JNCIS/JNCIP/JNCIE)
• Knowledge of Active Directory and Linux
• Hands-on experience using tools such as an oscilloscope, function generator, multi-meter, signal generator, etc.
• Knowledge of X.509 certificate validation, Typically requires a BS degree with 2 - 4 years of prior relevant experience., The physical and mental requirements described in this job description are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. Must be able to perform the essential physical functions of the position, including sitting, standing, walking, stooping, kneeling, and lifting up to 25 pounds, with or without reasonable accommodation.

3.93.9 out of 5 stars Columbia, MD 21046 $41.26 - $66.34 an hour - Contract, Pulled from the full job description

• 401(k)
• Health insurance
• Vision insurance
• Dental insurance
• Paid sick time
• Flexible spending account, * Flexible hours within the constructs of the workday
• Opportunity to attend industry-related conferences and seminars
• Maintain work-life balance in an environment that values your health and time outside the workplace
• Opportunity to work with and learn from experts in an open environment
• Great team camaraderie, PEAK’s benefit offerings available for our associates include medical, dental, vision, Flexible Spending Account (FSA), Dependent Care Savings Account (DCA), and 401K plan. PEAK believes that taking care of our team is essential for success and we are proud to provide benefits that enhance both your well-being and your future. Additionally, our associates may be eligible for Paid Sick Leave as required by Federal, State, or local laws.