Information Processing Standard Information Technology (FIPS) 140-3 and ISO 19790/24579 Security Evaluation standard and of devices against the Common Criteria Information Technology Security Evaluation. This position will specialize in the requirements for Entropy Source Validation (ESV).
Essential Job Duties and Responsibilities Perform ESV activities for FIPS 140-3 validation projects and Common Criteria projects Participate in customer Gap Analysis workshops and create related documentation. Analysis and testing for hardware and software entropy sources. Create Entropy backssment Reports (EAR) for FIPS and Common Criteria projects. Prepare ESV packages. Interface and be a technical
point of contact (POC) with customers. Assist in the development and review of all test reports and required certification documentation. Review/comment submission-related output from other engineers.
Provide technical assistance and collaborate with other FIPS and CC engineers. Participate in industry groups and conferences including presentations. Perform other duties as required. Essential Requirements and Qualifications Bachelor's degree in computer science, information technology, mathematics or a related field, or an equivalent combination of education, training, and experience. 1 to 2 years' experience applying the concepts of NIST SP 800-90B. Knowledge, experience, and
training in entropy sources and shall have a working knowledge of FIPS approved and NIST-recommended cryptographic algorithms and the test environment for ESV services.
Background in any of the following: digital or analog circuits, stochastic modelling, or interrupt processing or other events in computing systems. Ability to work well individually as well as in a team environment. Positive attitude with excellent analytical and communication skills, both verbal and written. Desire to learn new products and technologies. Commitment to high standards of ethics, regulatory compliance, customer service and business integrity. Hands-on user interface experience and command line fluency on Windows and Linux.
Ability to read computer code in languages such as C, C++, Python, and/or Java. Hands-on experience working with MS Office or equivalent. Other Essential Requirements and Qualifications Model Intertek's 10X Energies at all times within the workplace, practicing business the right way. Be aware of, and adhere to, safety practices and policies to ensure your own safety, as well as the safety of others who may be affected by your actions at work. Ability to work in fast-paced, multi-tasking environment with shifting priorities and demanding deadlines.
Must be detailed-oriented and able to effectively prioritize and organize workload, with efficient time management. Ability to communicate and interact effectively in verbal written and presentation formats. Must possess the fundamental technical and administrative skills required to perform the job duties. Must be customer focused and quality driven. Ability to travel as business needs dictate. Preferred Requirements and Qualifications Knowledge of entropy sources such as Jitter entropy. Ability to review Entropy backssment Reports (SP800-90B analysis). MS or Ph D degree in computer science, information technology or a related field.
Why work at Intertek? Intertek is a world leader in the $250 billion Quality Assurance market, with a proven, high-quality business model and a global network of customer-focused operations and highly engaged subject matter experts. At Intertek, we exercise our spirit of innovation, the passion of our people and our unmatched customer commitment to realize our purpose of making the world an ever better, safer, and more sustainable place for all. Learn more about Our History and What We Do. What we have to offer: When Working with Intertek , you can expect salary and benefit package competitively placed within the local market, including medical, dental, vision, life, disability, 401(k) with company match, tuition reimbursement and more.
Intertek is a drug-free workplace. As a condition of employment, certain positions may be required to pass a pre-employment drug test based on the type of work that will be performed. Intertek believes that Our People are our strongest tool for success. We are an Equal Opportunity Employer and do not discriminate against applicants due to veteran status or on the basis of disability.
All qualified applicants will receive consideration for employment without regard to race, color, religion, interaction, national origin, interactionual orientation, or gender identity. For individuals with disabilities who would like to request an accommodation, or who need assistance applying, please email xyz X@ or call -xyz X (option #5) to speak with a member of the HR Department. #LI-CL2 CA-CL1Intertek is a leading Total Quality Assurance provider to industries worldwide. Our network of more than 1,000 laboratories and offices in more than 100 countries, delivers innovative and bespoke Assurance, Testing, Inspection and Certification (ATIC) solutions for our customers' operations and supply chains.
Working at Intertek means joining a global network of state-of-the-art facilities and passionate people who deliver superior customer service with a purpose of bringing quality, safety, and sustainability to life.
Manual (AAPM) in determining technical Information Assurance (IA) requirements and ensure proper security implementation of the Risk Management Framework (RMF). Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security plan Attend the change control board (CCB) meetings.
Write standard operating procedures (SOP) and security in depth (SID) plans as well as security policies Provide cybersecurity education and training for all system users on appropriate risk mitigation strategies. Provide recommendations on 800-53 security controls and make develop System Security Plan (SSP), other RMF documents like the PIA,
DR/BCP. Track and monitor POA&Ms, track vulnerability management, provide solutions to vulnerabilities. Formally notify the ISSM of any changes to a system that could affect authorization.
Report all security-related incidents to the ISSM. Other assignments as assigned by the PM depending on the customers IS requirement REQUIRED QUALIFICATIONS Security Clearance: Public Trust Knowledge of NIST publications and perform the following Risk Management Framework (RMF) processes and procedures to include package development, including POA&Ms (mitigation statements), Continuous Monitoring (Con Mon) test results, Security Plans, Risk backssments, system/site policies, architecture diagrams, and
hardware/software inventories. Ability to identify security vulnerabilities in a broad spectrum of hardware and software products and provide risk mitigation solutions.
Demonstrate ability to manage multiple secure programs and backss new areas for compliance. Must be eligible to obtain and maintain a Secret clearance. Must have a CISSP or CISA certification. Must be a United States Citizen Location: Remote PREFERRED QUALIFICATIONS Bachelor's Degree with 3 years of industry experience Sec+ COMPANY OVERVIEW CSEngineering is a Service Disabled Veteran Owned Small Business (SDVOSB) that was founded in 2002 with the mission of being the best engineering and services firm in our industry while achieving the highest level of client satisfaction.
CSEngineering has significant past performance with satellite systems, weapons and missile systems, naval architecture and engineering, aviation systems, and IT and Enterprise Architecture. We have come a long way since we were founded and now also provide services with focuses on logistics, item management, administration, equipment specialization, program management, configuration management, financial management, LAN operations, information technology and maintenance, development and operation of missile system laboratories, the operation of data collection systems, database, and information management support, demilitarization processes and Dev Sec Ops.
We could not achieve this without the dedication of our employees to their work and the clients we serve. Additionally, CSE is a Hire Vets Gold Medallion award recipient. The HIRE Vets Medallion Award is the only federal-level veterans' employment award that recognizes a company or organization's commitment to veteran hiring, retention, and professional development. CSEngineering truly values its people, wants them to love their jobs, and to build their careers with us.
We are forever dissatisfied with status quo and are always looking for a better way to do things, not so much out of competitiveness, but out of a desire to simply be THE BEST and to lead our industry. CSE offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off. CSE is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, interaction, national origin, interactionual orientation, gender identity, or veteran status. Job Posted by Applicant Pro
