Common Criteria- FIPS Job 2024 Part Time

TITLE: Security Engineer – FIPS/CC (Mobile Devices)- ZR24020

Client: Samsung

POSITION TYPE: Contract- 6+Months (W2)

LOCATION: Remote

Job Description:

We are looking for a Security Engineer – FIPS/CC (Mobile Devices) who will be responsible for performing initial assessment of the security functions and specifications; consult various teams in the development of the process, design, and documentation required for the FIPS 140-2/3 accreditation of our cryptographic modules and common criteria evaluations of our security products. You will at times be responsible for security compliance analysis and testing of operational, management, and technical controls for products. Ideally you have deep mobile device expertise. You will be a part of FIPS 140-2/3 and Common Criteria evaluations team.

Role and Responsibilities:

• Develop plans and procedures using applicable security controls, including FIPS 140-2/3 specifications, NIAP Protection Profiles (MDFPP, VPN, WLAN, Biometric enrollment, and verification), DCID 6/3, DoD 8500, or NIST SP 800-53. Help with CAVP algorithm testing using ACVP/ACVTS and review of security policies for the modules.
• Assist in the development and review of all test reports and required certification documentation for all the FIPS 140-2/3 accreditation and Common Criteria evaluations.
• Use experience building testing environments, performing testing and reporting results (technical writing).
• Develop mitigation strategies to address vulnerabilities uncovered during security testing; and assist with completing security documentation to meet certification and authorization requirements, as required.
• Perform vulnerability analysis of product or system designs against applicable security criteria using common tools, including Nessus, NMAP, and WireShark.
• Project POC with Internal/External audience when required.

Required Experience and Education:

• 7+ years of technical experience in FIPS 140-2/3 and Common Criteria Mobile Device Evaluations.
• Bachelor’s Degree in Electrical Engineering, Computer/Information Science, Information Assurance/Cybersecurity, or equivalent degree (Master’s Degree preferred).
• Proficiency in FIPS 140-2/3 requirements and cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Proficiency in FIPS 186-4/5, SP 800-186, SP800-90B.
• Knowledge of common security related protocols and their design (i.e., SSH, IPsec, TLS, etc.)

Job Types: Part-time, Contract

Pay: $70.00 – $80.00 per hour

Expected hours: 40 per week

Schedule:

• 8 hour shift
• Day shift
• Monday to Friday

Experience:

• FIPS: 4 years (Required)
• FIPS 140-2: 4 years (Required)
• Common Criteria: 3 years (Required)

Work Location: Remote