FIPS Certifications Analyst

Position: Certifications Analyst Location: Fairfax, VA Job Type: Entry-level, Full-time Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-3, CC and DoDIN APL certifications. We are looking for an entry-level, full-time Information Security Analyst to join our team. Job Description: Product certification support for FIPS 140 Consulting Team.

Responsibilities

• Examine IT products against security certification standards in order to determine and document compliance gaps.
• Understand and analyze cryptography within an IT system.
• Analyze design, architecture and implementation details of IT products and produce technical documentation specific to security certifications.
• Configure IT products to meet compliance requirements and produce certification-specific deployment guidance.
• Author evaluation documentation for submission to testing labs and certifying authorities.
• Produce testing reports by conducting functional, operational, and vulnerability testing of the IT products.
• Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments.
• Manage project schedules Required Skills and Experience
• Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods
• Knowledge of secure communications protocols, including TLS, SSH, and IPsec
• Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline
• Strong analytical and technical skills
• Ability to assess IT products and components with great attention to detail, especially in relation to the uses of cryptography within a system
• Strong technical writing skills
• Strong oral presentation skills
• Ability to articulate in technical and non-technical terms to customers, peers, and management
• Strong organizational and prioritization skills Desired Skills and Experience
• Experience with project management
• Experience with government certification processes, especially FIPS 140-3
• Familiarity with the NIST SP 800 series publications, beyond SP 800-53