FIPS 140 Security Engineer Position Available In Greenville, South Carolina

Job Description:

FIPS 140

Security Engineer Department:

Cybersecurity/ Testing/FIPS Location:

Columbia, MD Work model:

REMOTE Role Type:

ContractNo Clearance Required• Not available on C2C basis• About Our ClientOur client offers an exciting opportunity to work in the rapidlyexpanding IT Security field, integral to supporting nationaldefense initiatives. This organization plays a crucial role inensuring national security by evaluating and validating IT securityproducts that are deployed to facilitate secure communications formilitary and defense systems. You will join a team of industryexperts and work with a wide range of Commercial Off-The-Shelf(COTS) products across various technology types in a hands-on labenvironment. The company fosters a supportive culture withperformance-based career development, flexible hours, work-lifebalance, and opportunities for continuous learning and professionalgrowth. Job Description As a

FIPS 140

Security Engineer, you willbe a vital member of a dedicated team focused on performingin-depth security evaluations and validation projects. Yourday-to-day work will involve a comprehensive range of activities,from general security analysis and product architecture review tohands-on vulnerability and physical security testing. You willapply your technical expertise to conduct system-level logicalanalysis, rigorous cryptographic algorithm testing, and detailedsource code reviews, all while ensuring products meet stringentsecurity standard requirements. This role offers the opportunity todirectly contribute to securing critical communication systems fornational defense, providing an impactful career in a growingindustry. You will collaborate closely within a team environment,sharing knowledge with experts, and your work will involve not onlytesting but also the development of applications and automationscripts to enhance testing capabilities, culminating in precisetechnical report writing. The ideal candidate is passionate aboutcybersecurity, cryptology, and ensuring the highest standards ofproduct security. Duties and Responsibilities Work on varied FIPS140 validation projects. Perform general security analysis ofproducts and systems. Conduct design work related to productarchitecture. Execute vulnerability testing on varioustechnologies. Conduct physical security testing of devices. Performsystem-level logical analysis. Evaluate products against TechnologyType standards (Protection Profiles). Conduct cryptographic andPublic Key Infrastructure (PKI) testing. Perform cryptographicalgorithm testing. Engage in source code review activities. Authorand review technical reports documenting findings. Automate testingprocesses through scripting. Develop applications to support testcases. Required Experience/Skills Cryptographic Validation Program(CVP) Certification. Knowledge of cryptographic encryptionalgorithms, key exchange algorithms, hashing/message authenticationalgorithms, PKI, and random number generators. Experience withvarious programming languages such as C, C++, Python, or Java, andtheir development environments. Ability to comprehend securitystandard requirements and apply them effectively to products.

Experience setting up networks and familiarity with subnetting androuting concepts. Knowledge of common security-related protocolsand their design (e.g., SSH, IPsec, TLS). Experience buildingtesting environments, performing testing, and reporting results(technical writing). Strong troubleshooting and problem-solvingskills. Strong multitasking and time management abilities.

Typically requires a Bachelor of Science (BS) degree with 2 to 4years of prior relevant experience. Nice-to-Haves Experience withPython programming language. Experience with debugging tools (e.g.,Android debug bridge (adb), WinDBG, Visual Studio). Experience withstatistical analysis of entropy sources. Knowledge of OpenSSLand/or OpenPGP. Vulnerability Analysis and/or penetration testingexperience/expertise. Strong knowledge of computer securityprinciples and best practices. Strong English (both oral andwritten) skills. Related certifications (e.g., CCNA/CCNP/CCIE,JNCIA/JNCIS/JNCIP/JNCIE). Knowledge of Active Directory and Linux.

Hands-on experience using tools such as an oscilloscope, functiongenerator, multi-meter, or signal generator. Knowledge of X.509certificate validation. Education Typically requires a Bachelor ofScience (BS) degree. Pay & Benefits Summary Performance-basedcareer development with well-defined roles and actionablequalifications. Flexible hours within the constructs of theworkday. Opportunity to attend industry-related conferences andseminars. Emphasis on maintaining work-life balance. Opportunity towork with and learn from industry experts in an open environment.

Great team camaraderie. Tuition reimbursement within appropriatedisciplines. Join our team and contribute to national securitythrough cutting-edge

FIPS 140

validation! Interested? Apply Now!

Connect with your

Catapult SG Recruiter:

Kailyn Hartley, atkailyn.hartley@catapultsg.com.

FIPS 140

| Cryptography | SecurityEngineer | Validation Engineer | IT Security | Cyber Security |Product Evaluation | Vulnerability Testing | PKI | CryptographicAlgorithms | Source Code Review | Network Security | TestingAutomation | Python | CVP Certification