Security Certification Engineer - Android, Common Criteria & FIPS

Are you passionate about transforming bleeding-edge technologies into services that will impact millions in our daily lives? At Mobile Platform Solutions (MPS), we are looking for passionate product managers to share their creative vision and to build applications and services for Samsung's array of devices spanning mobile, wearables, IoT, TVs, appliances, etc. In this position, you will join a collaborative team of world-class designers, researchers, and engineers in the field of AI/ML, blockchain, IAM, computer vision, AR/VR/XR, IOT technologies, with emphasis on mobile B2B services, security and privacy, Enterprise AI, etc.

Mountain View, CA or Open to Remote

Are you passionate about transforming bleeding-edge technologies into services that will impact millions in our daily lives? At Mobile Platform Solutions (MPS), we are looking for passionate product managers to share their creative vision and to build applications and services for Samsung's array of devices spanning mobile, wearables, IoT, TVs, appliances, etc. In this position, you will join a collaborative team of world-class designers, researchers, and engineers in the field of AI/ML, blockchain, IAM, computer vision, AR/VR/XR, IOT technologies, with emphasis on mobile B2B services, security and privacy, Enterprise AI, etc.

Come join the Samsung MPS team and be a leader in bringing futuristic services to life!

The Security Certification Engineer is an individual contributor (100% hands on security engineering) role dedicated to certifying Mobile Device, File Encryption (Samsung Products) using US security certification standards Common Criteria (NIAP) and FIPS 140-3 cryptographic certifications across our mobile device ecosystem.

• Security Engineering:
  This position requires working knowledge of the Android Framework, Linux kernel security, some level of ability to perform code level analysis of the Android Framework, ability to trace and debug security controls across the Android OS Framework (AOSP), BoringSSL/OpenSSL, Keystore, Strong Box/TEE, SELinux policies, and native C/C++ cryptographic libraries. Ability to Perform source code and protocol level analysis to ensure compliance to the specifications.
• Common Criteria (NIAP):
  Drive hands on evaluations against Mobile Device Fundamentals Protection Profile (MDFPP), Application Software PP (App PP), Functional Package for TLS (), and VPN Client (). Assist in the development and review of all test reports and required certification documentation for all the Common Criteria evaluations and FIPS 140-2/3 accreditation.
• Technical Documentation Authorship:
  Independently author, draft, update evaluate all documentation artifacts, for CC specifically Security Targets (ST), Key Management Descriptions (KMD), Entropy Documentation and Administrative/Operational User Guidance (AGD). FIPS 140-3 evaluations draft all the complete Security Policies, create JSON vectors for the cryptographic modules. Develop mitigation strategies to address vulnerabilities uncovered during security testing; and assist with completing all the required documentation to meet the specifications and certification requirements, as required.
• Perf FIPS 140-3 Cryptographic Module Validation:
  Execute every technical step of NIST CMVP/CAVP certification (ISO/IEC 19790). Draft the complete FIPS 140-3 Security Policies, configure and run Automated Cryptographic Validation Protocol (ACVP) JSON test harnesses, validate algorithm implementations (CAVP), support and resolve all the lab testing issues and address CMVP feedback. Perform vulnerability analysis of product or system designs against applicable security criteria using common tools, including…