Position: Certifications Analyst
Location: Fair Lakes, VA
Job Type: Entry-level, Full-time, Hybrid
About Corsec:
The Certifications Analyst manages and supports IT security certification projects, ensuring compliance with Common Criteria standards throughout the evaluation lifecycle. This role includes evaluating IT systems against Common Criteria requirements to identify compliance gaps, analyze product architectures, and develop the technical documentation required for certification.
The analyst also configures products according to certification-specific deployment guidance and conducts functional testing to support evaluation activities. In addition, the role involves collaborating with customers, internal teams, testing laboratories, and certification bodies to address findings, respond to feedback, and ensure project milestones and certification objectives are met across multiple engagements.
Corsec is the benchmark for efficient, accurate security certification processes, helping organizations achieve compliance “Done Once, Done Right!”
Job Description:
The Certifications Analyst manages and supports IT security certification projects, ensuring compliance with Common Criteria standards throughout the evaluation lifecycle. This role involves examining and product architectures and supporting materials, and producing the technical documentation required for certification.
The analyst configures IT products according to certification-specific deployment guidance, conducts functional testing to generate evaluation and testing reports, and authors documentation for submission to testing laboratories and certifying authorities. Success in this role requires effective collaboration with customers, cross-functional teams, testing facilities, and international certification bodies to resolve compliance gaps, address testing and documentation feedback, and ensure project milestones and certification objectives are achieved across multiple complex engagements.
Responsibilities:
- Evaluate systems against Common Criteria requirements to identify and document compliance gaps.
- Analyze product architectures and supporting materials to develop technical documentation required for evaluation activities.
- Configure systems according to certification-specific deployment guidance.
- Author evaluation documentation for submission to testing laboratories and certification authorities.
- Conduct functional testing and generate evaluation and testing reports.
- Collaborate with vendors and testing laboratories to resolve findings, respond to technical questions, and incorporate review feedback.
Required Skills and Experience:
-U.S. citizenship or permanent residency required
- Knowledge of at least two of the following IT concepts: networking, cryptography, operating systems, communication protocols, cybersecurity, information assurance, or risk management.
- Strong analytical and technical skills - Ability to assess IT products and components with great attention to detail
- Strong oral presentation skills - Ability to articulate in technical and non-technical terms to customers, peers, and management
- Strong critical thinking skills
- Time management skills
Desired Skills and Experience
- Ability to install, configure, and troubleshoot IT products such as firewalls, ethernet switches, routers, IDS/IPS, SIEM, cyber security tools, etc.
- Working knowledge of commonly deployed enterprise IT solutions such as authentication servers, NTP servers, syslog servers, virtualization, and container solutions, etc.
- Experience with the Common Criteria standard and related Protection Profiles.
- Experience with ISO or other standards and able to interpret their requirements.
Skills Required
- Bachelor's degree in computer science, information systems, cybersecurity, computer engineering, or a related technical field
- U.S. citizenship or permanent residency
- Knowledge of at least two of networking, cryptography, operating systems, communication protocols, cybersecurity, information assurance, or risk management
- Strong analytical and technical skills, including the ability to assess IT products and components accurately
- Strong oral presentation skills and ability to communicate with technical and non-technical audiences
- Strong critical thinking skills
- Time management skills
- Ability to install, configure, and troubleshoot IT products such as firewalls, Ethernet switches, routers, IDS/IPS, SIEM, and cybersecurity tools
- Working knowledge of enterprise IT solutions such as authentication servers, NTP servers, syslog servers, virtualization, and container solutions
- Experience with the Common Criteria standard and related Protection Profiles
- Experience with ISO or other standards and ability to interpret their requirements
What We Do
Corsec Security guides organizations through product security certification and validation, helping companies meet requirements for FIPS 140-2/140-3, Common Criteria, CSfC, and U.S. Department of Defense programs. Its team provides specialized expertise in security engineering, cryptography, networking, and certification strategy, and helps customers navigate third-party evaluations. Corsec presents certifications as a means to support clients’ market goals and safeguard products as global security requirements evolve.
