FIPS 140 Security Engineer

#Eng-IT-01

Job Location: Columbia, MD

Columbia, Maryland, is a vibrant community known for its rich history, diverse culture, and proximity to major metropolitan areas like Baltimore and Washington, D.C. It offers a great quality of life with numerous parks, recreational facilities, and a strong sense of community.

Job Summary

Join our Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team to work in the growing IT Security field supporting National defense. Engage with products deployed in larger systems to facilitate secure communications for our military in the modern cyber warfare environment. This is an opportunity to learn from industry experts, work with various Commercial off-the-Shelf products across many technology types, and utilize your skillset in a hands-on lab environment.

Benefits

• Flexible hours within the constructs of the workday
• Opportunity to attend industry-related conferences and seminars
• Maintain work-life balance in an environment that values your health and time outside the workplace
• Opportunity to work with and learn from experts in an open environment
• Great team camaraderie

Responsibilities

• Work on varied FIPS 140 validation projects
• Conduct general security analysis
• Engage in design work (product architecture)
• Perform vulnerability testing and physical security testing
• Conduct system-level logical analysis
• Evaluate products against Technology Type standards (Protection Profiles)
• Conduct cryptographic and Public Key Infrastructure (PKI) testing
• Perform cryptographic algorithm testing
• Engage in source code review activities
• Write and review technical reports
• Automate testing through scripting
• Develop applications to support test cases

Qualifications

• Cryptographic Validation Program (CVP) Certification
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Experience with various programming languages (C, C++, Python, or Java) and development environments
• Ability to comprehend security standard requirements and apply them to products
• Experience setting up networks and familiarity with subnetting and routing concepts
• Knowledge of common security-related protocols and their design (i.e., SSH, IPsec, TLS, etc.)
• Experience building testing environments, performing testing, and reporting results (technical writing)
• Strong troubleshooting and problem-solving skills
• Strong multitasking and time management skills

Preferred Qualifications

• Experience with Python programming language
• Experience with debugging (Android debug bridge (adb), WinDBG, Visual Studio, etc.)
• Experience with statistical analysis of entropy sources
• Knowledge of OpenSSL and/or OpenPGP
• Vulnerability analysis and/or penetration testing experience/expertise
• Strong knowledge of computer security principles and best practices
• Strong English (both oral and written) skills
• Related certifications (CCNA/CCNP/CCIE, JNCIA/JNCIS/JNCIP/JNCIE)
• Knowledge of Active Directory and Linux
• Hands-on experience using tools such as an oscilloscope, function generator, multi-meter, signal generator, etc.
• Knowledge of X.509 certificate validation

Education & Experience

Typically requires a BS degree with 2 - 4 years of prior relevant experience.

Benefits
PEAK's benefit offerings available for our associates include medical, dental, vision, Flexible Spending Account (FSA), Dependent Care Savings Account (DCA), and 401K plan. PEAK believes that taking care of our team is essential for success and we are proud to provide benefits that enhance both your well-being and your future. Additionally, our associates may be eligible for Paid Sick Leave as required by Federal, State, or local laws.  

Equal Opportunity Employer (EEO) 
PEAK Technical Staffing is committed to creating a diverse and inclusive environment and is proud to be an Equal Opportunity Employer. PEAK does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status, or any other characteristic protected by applicable law. All employment decisions are made based on qualifications, merit, and business need. We encourage all individuals to apply. 

Americans Disabilities Act (ADA) 
The physical and mental requirements described in this job description are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. Must be able to perform the essential physical functions of the position, including sitting, standing, walking, stooping, kneeling, and lifting up to 25 pounds, with or without reasonable accommodation. 

Candidate Privacy
To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://peaktechnical.com/privacy-policy/ and https://peaktechnical.com/ca-residents-privacy-rights/  

AI Recruiting Disclosure 
We use AI-assisted tools to help review applications and compare your experience to job requirements, but all hiring decisions are made by human recruiters. You may request a human-only process or opt out of automated communication at any time. Required notices and our latest bias audit are available on our website: www.peaktechnical.com/ai-disclosure.