Highlights of the Job 

Introduction

Lightship Security is a market leader in standards-based IT product security certification. We work with leading edge technology vendors from around the world to evaluate and test their products against various cyber security standards such as Common Criteria and FIPS 140. We are committed to creating real world value through continued innovation in this field.

We’re looking for an Associate Security Evaluator to join our US team and help support the projects in the setup, configuration, and testing against custom security requirements. Someone with a critical mindset, who is not afraid to ask questions, who is proactive, and assertive with the ability to understand different perspectives and the ability to convincingly present a logical argument.

And finally, someone who shares true dedication to our core values: we solve problems for our clients, we work hard with integrity, we are technical experts, we value family, and we have fun.

Sound good? Here’s a little more about the job:

Key Responsibilities

A typical project includes set-up and configuration of lab test environment and assessment of a product’s security architecture, constructing standards-based documentation such as a security assessment report, analysis and assessment of system vulnerabilities, construction and/or execution of a standards-based test plan using Lightship’s Conformance Automation Platform tool, fuzzing and penetration testing. Projects will involve both hardware and software devices, and performing ad hoc IT support duties as directed will be part of the responsibilities.

The Ideal Candidate

To excel at Lightship, you have knowledge of enterprise class networking products such as Firewalls, and Unix based Operating Systems such as RHEL and Oracle Linux. You are able to demonstrate expertise with the Linux operating system, virtualization technologies, cryptographic concepts, and networking fundamentals.

What You Bring

Education and Experience

• A University degree or college diploma in a technical field is required

• Must have at a minimum of 1-3 years' experience working with enterprise IT products (RHEL, Fortinet, Cisco, etc.) 

Soft Skills

• Ability to manage concurrent projects
• Excellent communication skills: ability to express requirements in technical and non-technical terms to customers, peers, and management; must be able to prepare consistent and quality reports for consumption by critical customers
• A proven ability to work independently
• Possess creative and critical thinking skills

Technical Skills

• Strong knowledge of networking technologies, protocols, and information delivery such as: TCP/IP, SSL/TLS, SSH and HTTP 
• Experience with programming and scripting languages such as: Python, Bash, and C 
• Demonstrative experience using Linux and Windows operating systems 
• Demonstrative experience with virtualization technologies, such as hypervisors and software-defined networking
• Experience with vulnerability analysis and penetration testing of both hardware and software targets
• Knowledge of fundamental cryptographic concepts and leading cryptographic algorithms

Bonus, but not required

• Knowledge of FIPS 140-2, FIPS 140-3, Common Criteria, and other related standards

 Requirements 

• Must be eligible for a Government security clearance (Canada and USA)
• Must be able and willing to travel internationally <20% and hold a valid U.S. work permit

What’s in it for you?

• Health & Wellness: We prioritize your well-being. Our offerings include health, dental, life, and long-term disability insurance to support your health and overall wellness.
• Development Opportunities: Cultivating employee career growth is important to us. We provide professional support, coaching, a training reimbursement program, and more to empower your development.
• Social: To promote engagement and teamwork, we come together at a range of company-organized events throughout the year.
• Culture: We offer an innovative, collaborative, and dynamic workplace culture by fostering open communication, encouraging creativity, and promoting continuous learning and growth among our team members.
• Flexibility: We try to accommodate real-life as much as possible and know that work is just a part of our daily lives. We offer a hybrid work model, and we expect the successful candidate to come into our office 2 to 3 days a week.

The successful candidate will work from our office in Baltimore, MD.

Lightship is an equal opportunity employer. Accommodations will be provided at all stages of the hiring process. We ask applicants to make their needs known in advance. We thank all applicants for their interest in this opportunity. Only those selected for an interview will be contacted. No agencies, please.