> Markdown version of [/jobs/ext/1470334-common-criteria-security-engineer](https://www.wearedevelopers.com/jobs/ext/1470334-common-criteria-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Common Criteria Security Engineer

- **Company:** Zachary Piper
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Systems Engineering, Cloud Computing Security, CompTIA Security+, Cyber Security, Identity and Access Management, Network Security, Secure Coding, Software Engineering, Software Security, Information Technology, Vulnerability Analysis
- **Published:** July 28, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9060778/common-criteria-security-engineer

## About the Role

* Bachelor's degree in computer science, Cybersecurity, Engineering, Information Technology, or a related discipline.
 * Minimum of 3 years of experience in product security, systems engineering, software engineering, or a related technical security role.
 * Knowledge of secure software development practices, system security architecture, and risk-based design principles.
 * Hands-on experience in one or more areas including IAM, operating systems, cloud security, network security, cryptography, or embedded technologies.

 * Familiarity with Common Criteria (ISO/IEC 15408) evaluations and associated certification processes.
 * Understanding of Security Targets (STs), Protection Profiles (PPs), Evaluation Assurance Levels (EALs), and emerging EUCC requirements.
 * Experience supporting products within government, defense, critical infrastructure, or other highly regulated industries.
 * Industry certifications such as CISSP, Security+, CCSP, or similar security credentials.
 * Experience collaborating with accredited testing laboratories and external regulatory stakeholders.

## Description

Piper Companies is seeking a to join a leading cybersecurity and technology organization focused on delivering secure, certifiable products for global markets. The Common Criteria Security Engineer will play a key role in aligning product security initiatives with European certification standards, partnering closely with engineering, security, and product teams to support certification efforts and strengthen secure development practices. This position is primarily remote on the East Coast and requires occasional early morning availability to collaborate with teams and partners across Europe. This is a long-term open-ended contract position.

 * Partner with software and systems engineering teams to incorporate Common Criteria requirements into product design and development activities.
 * Drive certification initiatives by assisting with Security Target creation, gathering evaluation evidence, and coordinating documentation efforts.
 * Assess product architectures, security controls, and technical deliverables to ensure preparedness for certification reviews.
 * Conduct security-focused activities including threat modeling, architecture assessments, and vulnerability analysis.
 * Work directly with evaluation laboratories, product stakeholders, and security teams to address findings and maintain certification status.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)