FIPS Certifications Analyst

Position: Certifications Analyst

Location: Fairfax, VA  

Job Type: Entry-level, Full-time  

Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-3, CC and DoDIN APL certifications. We are looking for an entry-level, full-time Information Security Analyst to join our team.   

Job Description: Product certification support for FIPS 140 Consulting Team. 

Responsibilities 

•    Examine IT products against security certification standards in order to determine and document compliance gaps.  

•    Understand and analyze cryptography within an IT system.

•    Analyze design, architecture and implementation details of IT products and produce technical documentation specific to security certifications.   

•    Configure IT products to meet compliance requirements and produce certification-specific deployment guidance.  

•    Author evaluation documentation for submission to testing labs and certifying authorities.   

•    Produce testing reports by conducting functional, operational, and vulnerability testing of the IT products.   

•    Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments. 

•    Manage project schedules   

Required Skills and Experience   

•    Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods 

•    Knowledge of secure communications protocols, including TLS, SSH, and IPsec

•    Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline

•    Strong analytical and technical skills - Ability to assess IT products and components with great attention to detail, especially in relation to the uses of cryptography within a system

•    Strong technical writing skills

•    Strong oral presentation skills - Ability to articulate in technical and non-technical terms to customers, peers, and management

•    Strong organizational and prioritization skills

Desired Skills and Experience

•    Experience with project management 

•    Experience with government certification processes, especially FIPS 140-3

•    Familiarity with the NIST SP 800 series publications, beyond SP 800-53