Position: Certifications Analyst
Location: Fairfax, VA
Job Type: Entry-level, Full-time
Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-3, CC and DoDIN APL certifications. We are looking for an entry-level, full-time Information Security Analyst to join our team.
Job Description: Product certification support for FIPS 140 Consulting Team.
Responsibilities
• Examine IT products against security certification standards in order to determine and document compliance gaps.
• Understand and analyze cryptography within an IT system.
• Analyze design, architecture and implementation details of IT products and produce technical documentation specific to security certifications.
• Configure IT products to meet compliance requirements and produce certification-specific deployment guidance.
• Author evaluation documentation for submission to testing labs and certifying authorities.
• Produce testing reports by conducting functional, operational, and vulnerability testing of the IT products.
• Communicate effectively with security product vendors, testing facilities personnel, and certifying authorities to address compliance gaps, testing queries and documentation comments.
• Manage project schedules
Required Skills and Experience
• Knowledge of a variety of cryptographic methods, including encryption/decryption, digital signatures and PKI, hashing, random number generation, and key transport/agreement methods
• Knowledge of secure communications protocols, including TLS, SSH, and IPsec
• Bachelor's degree in computer science, information systems, cyber security, computer engineering, or related discipline
• Strong analytical and technical skills - Ability to assess IT products and components with great attention to detail, especially in relation to the uses of cryptography within a system
• Strong technical writing skills
• Strong oral presentation skills - Ability to articulate in technical and non-technical terms to customers, peers, and management
• Strong organizational and prioritization skills
Desired Skills and Experience
• Experience with project management
• Experience with government certification processes, especially FIPS 140-3
• Familiarity with the NIST SP 800 series publications, beyond SP 800-53
Skills Required
- Knowledge of cryptographic methods, including encryption/decryption, digital signatures, PKI, hashing, random number generation, and key transport/agreement methods
- Knowledge of secure communications protocols, including TLS, SSH, and IPsec
- Bachelor's degree in computer science, information systems, cybersecurity, computer engineering, or a related discipline
- Strong analytical and technical skills, including detailed assessment of IT products and cryptographic use within systems
- Strong technical writing skills
- Strong oral presentation and technical communication skills
- Strong organizational and prioritization skills
- Experience with project management
- Experience with government certification processes, especially FIPS 140-3
- Familiarity with NIST SP 800 series publications beyond SP 800-53
What We Do
Corsec Security guides organizations through product security certification and validation, helping companies meet requirements for FIPS 140-2/140-3, Common Criteria, CSfC, and U.S. Department of Defense programs. Its team provides specialized expertise in security engineering, cryptography, networking, and certification strategy, and helps customers navigate third-party evaluations. Corsec presents certifications as a means to support clients’ market goals and safeguard products as global security requirements evolve.
