FIPS Entropy Specialist

Overview

The Cryptographic Security Testing (CST) Lab within Accredited Testing and Evaluation (AT&E) at Leidos is seeking a FIPS 140 Entropy Specialist. This technical position acts as a Subject Matter Expert in entropy within the scope of the Entropy Source Validation (ESV) program run by NIST and is expected to lead entropy sources through all phases of work to achieve ESV certification.

• Analysis of entropy sources against NIST SP 800-90B
• Statistical testing of noise datasets
• Review of entropy assessment reports and public use documents
• Submission of ESV packages through the NIST Entropy Source Validation Test System (ESVTS)
• General security analysis
• Cryptographic algorithm testing
• Source code review activities
• Test case development/execution
• Technical report writing and review

• Minimum Bachelor of Science in Mathematics, Computer Science, Computer Engineering or related technical discipline.
• Expert knowledge of SP 800-90B and entropy related requirements from FIPS Implementation Guidance (IG).
• Familiarity with cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Experience with various programming languages (C, C++, Python or Java) and development environments.
• Ability to comprehend security standard requirements and apply them to products.
• Knowledge of common security related protocols and their design (i.e. SSH, IPsec, TLS, etc.).
• Experience building testing environments, performing testing and reporting results (technical writing).
• Strong problem-solving skills.
• Strong multitasking and time management.

• CVP certification is not required for this role; however, it is highly recommended and should be pursued to enhance skills and career development within the field.

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.