FIPS Certifications Analyst

Position: Certifications Analyst

Location: Fairfax, VA

Job Type: Entry-level, Full-time

Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-3, CC and DoDIN APL certifications. We are looking for an entry-level, full-time Information Security Analyst to join our team.

Job Description: Product certification support for FIPS 140 Consulting Team.

Responsibilities

•Examine IT products against security certification standards in order to determine and document compliance gaps.

•Understand and analyze cryptography within an IT system.

•Analyze design, architecture and implementation details of IT products and produce technical documentation specific to security certifications.

•Configure IT products to meet compliance requirements and produce certification-specific deployment guidance.

•Author evaluation documentation for submission to testing labs and certifying authorities.

•Produce testing reports by conducting functional, operational, and vulnerability testing of the IT products.

•Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments.

•Manage project schedules

Required Skills and Experience

•Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods

•Knowledge of secure communications protocols, including TLS, SSH, and IPsec

•Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline

•Strong analytical and technical skills - Ability to assess IT products and components with great attention to detail, especially in relation to the uses of cryptography within a system

•Strong technical writing skills

•Strong oral presentation skills - Ability to articulate in technical and non-technical terms to customers, peers, and management

•Strong organizational and prioritization skills

Desired Skills and Experience

•Experience with project management

•Experience with government certification processes, especially FIPS 140-3

•Familiarity with the NIST SP 800 series publications, beyond SP 800-53