What are the responsibilities and job description for the Senior Information Security Analyst position at Aptonet?
INFO SECURITY ANALYST IV
Location: Columbia, MD
Position Type: Onsite
Contract Duration: 6 months
Role Summary
We are seeking an experienced Info Security Analyst IV to support FIPS 140 validation projects within a hands-on lab environment. This role focuses on security analysis, cryptographic validation testing, product evaluations, automation, and technical reporting in support of National Defense initiatives. The ideal candidate will have strong experience in cryptographic technologies, testing methodologies, and security engineering, along with a mandatory Cryptographic Validation Program (CVP) Certification.
Key Responsibilities
- Support and execute FIPS 140 validation projects
- Perform general security analysis and vulnerability testing
- Conduct physical security testing and system-level logical analysis
- Evaluate products against Technology Type standards
- Perform cryptographic and Public Key Infrastructure (PKI) testing
- Execute cryptographic algorithm testing
- Conduct source code review activities
- Develop technical reports and documentation
- Automate testing through scripting
- Develop applications to support test cases
- Assist with product architecture and design analysis
- Build and maintain testing environments
- Analyze and troubleshoot security-related issues
Required Technical Skills
- MUST HAVE Cryptographic Validation Program (CVP) Certification
- Knowledge of:
- Cryptographic encryption algorithms
- Key exchange algorithms
- Hashing and message authentication algorithms
- PKI
- Random number generators
- Experience with programming languages such as:
- C
- C
- Python
- Java
- Experience with testing automation and scripting
- Understanding of security standard requirements and product compliance
- Experience with networking concepts including subnetting and routing
- Knowledge of security protocols including:
- SSH
- IPsec
- TLS
- Experience building testing environments and documenting results
- Strong troubleshooting and problem-solving skills
- Strong multitasking and time management skills
Preferred / Nice-to-Have Skills
- Experience working in a lab environment
- Experience with Python programming
- Experience with debugging tools such as:
- Android Debug Bridge (adb)
- WinDBG
- Visual Studio
- Experience with entropy source statistical analysis
- Knowledge of:
- OpenSSL
- OpenPGP
- Active Directory
- Linux
- X.509 certificate validation
- Vulnerability analysis and penetration testing experience
- Related certifications:
- CCNA / CCNP / CCIE
- JNCIA / JNCIS / JNCIP / JNCIE
- Hands-on experience with hardware testing tools such as:
- Oscilloscope
- Function generator
- Multi-meter
- Signal generator
- Local to Columbia, MD area
Qualifications & Experience
- Bachelor’s degree required
- Typically requires 2–4 years of relevant experience
- Strong written and verbal English communication skills
- Ability to work onsite in a collaborative lab setting
- Previous experience supporting security validation projects preferred
About the Team / Company
The role supports the Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team in a collaborative onsite environment focused on National Defense and cybersecurity initiatives. The team consists of 12 team members and 3 project managers supporting secure communications and product validation efforts.