What are the responsibilities and job description for the Certification Analyst position at Corsec Security, Inc.?
Position: Certification FIPS Certification Analyst
Location: Herndon, VA 20171
Job Type: Full-time, Entry-level
Looking for technical individuals who love to research, have an understanding of cryptography, and are familiar with software development. You will analyze IT security products, understanding about their use of cryptography, hardware design, and source code.
Job Description: Certifications Analyst supporting the FIPS 140 Consulting Team.
What You'll Do
Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-2 and FIPS 140-3, CC and DoDIN APL certifications.
Location: Herndon, VA 20171
Job Type: Full-time, Entry-level
Looking for technical individuals who love to research, have an understanding of cryptography, and are familiar with software development. You will analyze IT security products, understanding about their use of cryptography, hardware design, and source code.
Job Description: Certifications Analyst supporting the FIPS 140 Consulting Team.
What You'll Do
- Examine IT products against security certification standards in order to determine and document compliance gap reports.
- Analyze source code, design, architecture, schematics, and implementation details of IT products and produce technical documentation specific to security certifications.
- Perform a deep dive into cryptographic implementations within these systems to understand all aspects of the products cryptographic operations.
- Author evaluation documentation for submission to testing labs and certifying authorities.
- Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments.
- Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods
- Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline
- Strong analytical and technical skills - ability to assess IT products and components with great attention to detail
- Strong oral presentation skills - ability to articulate requirements in technical and non-technical terms to customers, peers and management
- Strong organizational and prioritization skills
- Strong technical writing skills
- Knowledge of the underlying methods that make up secure communications protocols, including TLS, SSH, and IPsec
- Familiarity with the following NIST SP 800 series publications: SP 800-38, SP 800-52, SP 800-56, SP 800-57, SP 800-67, SP 800-90, SP 800-107, SP 800-108, SP 800-131, SP 800-132, SP 800-133 SP 800-135, SP 800-140, SP 800-185, SP 800-186
Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-2 and FIPS 140-3, CC and DoDIN APL certifications.
