Common Criteria Security Engineer

Piper Companies is seeking a to join a leading cybersecurity and technology organization focused on delivering secure, certifiable products for global markets. The Common Criteria Security Engineer will play a key role in aligning product security initiatives with European certification standards, partnering closely with engineering, security, and product teams to support certification efforts and strengthen secure development practices. This position is primarily remote on the East Coast and requires occasional early morning availability to collaborate with teams and partners across Europe. This is a long-term open-ended contract position.

• Partner with software and systems engineering teams to incorporate Common Criteria requirements into product design and development activities.
• Drive certification initiatives by assisting with Security Target creation, gathering evaluation evidence, and coordinating documentation efforts.
• Assess product architectures, security controls, and technical deliverables to ensure preparedness for certification reviews.
• Conduct security-focused activities including threat modeling, architecture assessments, and vulnerability analysis.
• Work directly with evaluation laboratories, product stakeholders, and security teams to address findings and maintain certification status.

• Bachelor’s degree in computer science, Cybersecurity, Engineering, Information Technology, or a related discipline.
• Minimum of 3 years of experience in product security, systems engineering, software engineering, or a related technical security role.
• Knowledge of secure software development practices, system security architecture, and risk-based design principles.

• Hands-on experience in one or more areas including IAM, operating systems, cloud security, network security, cryptography, or embedded technologies.

• Familiarity with Common Criteria (ISO/IEC 15408) evaluations and associated certification processes.
• Understanding of Security Targets (STs), Protection Profiles (PPs), Evaluation Assurance Levels (EALs), and emerging EUCC requirements.
• Experience supporting products within government, defense, critical infrastructure, or other highly regulated industries.
• Industry certifications such as CISSP, Security+, CCSP, or similar security credentials.
• Experience collaborating with accredited testing laboratories and external regulatory stakeholders.

• Salary range: DOE
• Comprehensive medical, dental, vision, 401(k), PTO, holiday