Offer summary

Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field., Experience with security controls and compliance frameworks such as NIAP, FIPS, and NIST., Proficiency in vulnerability analysis tools like Nessus, NMAP, and Wireshark., Strong technical writing skills for documentation and reporting..

Key responsabilities:

Develop security targets and assist with testing and documentation for product evaluations.

Create plans and procedures using applicable security controls and assist with algorithm testing.

Review test reports and certification documentation for Common Criteria and FIPS evaluations.

Conduct vulnerability analysis and develop mitigation strategies for identified vulnerabilities.

Job description

Enter Job Description.

100% Remote Role.
Develop the security target for our products, assist with the testing,documentation and working with the necessary engineering teams during the evaluation.
Develop plans and procedures using applicable security controls, including NIAP Protection Profiles (MDFPP, VPN, WLAN, Biometric enrollment, and verification), assist with the CAVP algorithm testing ,drafting and review of the security policies for our cryptographic modules according to the FIPS 140-3 specifications, possess information around the DCID 6/3, DoD 8500, or NIST SP 800-53.
Assist in the development and review of all test reports and required certification documentation for all the Common Criteria evaluations and FIPS 140-2/3 accreditation.
Experience building testing environments, performing testing and reporting results (technical writing) for all of the common criteria and FIPS evaluations.
Develop mitigation strategies to address vulnerabilities uncovered during security testing; and assist with completing all the required documentation to meet the specifications and certification requirements, as required.
Perform vulnerability analysis of product or system designs against applicable security criteria using common tools, including Nessus, NMAP, and Wireshark.
Project POC with Internal/External audience when required.

EEO Employer
LanceSoft is a certified Minority Business Enterprise (MBE) and an equal opportunity employer. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.
This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. LanceSoft makes hiring decisions based solely on qualifications, merit, and business needs at the time.

Required profile