FIPS Security Engineer

Overview

As a FIPS 140 Security Engineer, you will get an exciting opportunity to work in the growing IT Security field in support of National Defense. The products you will touch will be deployed into larger systems and/or deployments to facilitate secure communications for our military in the modern cyber warfare environment. Your responsibilities will include security analysis, product architecture and design, coding, testing, debugging, quality assurance, open-source assessment, and providing post-production support.

The position is based in Germantown, MD.

• Work on various FIPS 140 validation projects
• Perform general security analysis
• Engage in design work, including product architecture
• Conduct vulnerability testing
• Conduct physical security testing
• Perform system-level logical analysis
• Evaluate products against technology-type standards (Protection Profiles)
• Conduct cryptographic and Public Key Infrastructure (PKI) testing
• Perform cryptographic algorithm testing
• Engage in source code review activities
• Write and review technical reports
• Automate testing procedures using scripting
• Develop applications to support test cases
• Design, develop, code, test, and debug system software
• Integrate and validate new product designs
• Provide post-production support
• Interface with hardware design and development
• Assess third-party and open-source software
• Recommend product improvements

• Must be a U.S. Citizen with the ability to obtain a Secret clearance
• S. in Computer Science, Computer or Electrical Engineering, or similar
• 6+ years of related development experience
• Experience with Trusted Execution Environment (TEE)
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Experience with various programming languages such as C, C++, Python, or Java, as well as development environments
• Ability to comprehend security standard requirements and apply them to products.
• Experience setting up networks and familiarity with subnetting and routing concepts.
• Knowledge of common security-related protocols and their design (e.g., SSH, IPsec, TLS, MACsec, etc.)
• Experience building testing environments, conducting testing, and reporting results (technical writing)
• Strong troubleshooting and problem-solving skills
• Strong multitasking and time management abilities

• Experience with statistical analysis of entropy sources
• Knowledge of OpenSSL
• Experience in vulnerability analysis and/or penetration testing
• Strong knowledge of computer security principles and best practices
• Proficient in spoken and written English
• Knowledge of Linux
• Hands-on experience using tools like an oscilloscope, function generator, multi-meter, signal generator, etc.
• Excellent oral and written communication skills

• Developing innovative, meaningful products from scratch
• A dynamic, innovative, and productive workplace
• Cutting-edge technology & high-tech lab
• Continuous career growth opportunities
• Competitive compensation package
• Medical, Dental, Vision & Life Insurance
• Tuition Reimbursement
• Paid Parental Leave
• 401K match
• Flextime
• Fun & games events
• Coffee, sweets, & much more...

Maxtena is an Equal Opportunity Employer.