What are the responsibilities and job description for the FIPS Certification Analyst position at Corsec Security, Inc.?
Position: FIPS Certification Analyst
Location: Corporate office in Virginia and remote
Job Type: Full-time, Entry-level
Corsec is seeking an entry-level Certification Consultant to join our FIPS 140-3 Consulting Team. In this role, you'll work with leading technology companies to help validate the security of their products and guide them through the FIPS 140-3 certification process.
As a Certification Consultant, you will evaluate cryptographic implementations, analyze product architectures, identify compliance gaps, and develop the technical documentation required for certification. You'll collaborate directly with product vendors, accredited testing laboratories, and government certification authorities while gaining hands-on experience with industry-leading cybersecurity technologies.
Responsibilities
- Evaluate IT products against FIPS 140-3 and related security standards to identify and document compliance gaps.
- Analyze cryptographic implementations within hardware, software, and firmware products.
- Review product architecture, design, and implementation details to determine certification readiness.
- Develop technical documentation required for FIPS 140-3 security evaluations and certification submissions.
- Configure products to meet certification requirements and create deployment guidance for secure implementations.
- Collaborate with product vendors to resolve technical issues and address certification requirements throughout the evaluation process.
- Communicate with accredited testing laboratories and government certification authorities regarding technical questions, documentation reviews, and compliance findings.
- Manage project timelines and coordinate multiple certification efforts simultaneously.
- Stay current on evolving cryptographic standards, security guidance, and certification requirements.
Education
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Information Systems, or a related technical discipline.
Required Skills & Experience
- Understanding of modern cryptographic concepts, including:
- Encryption and decryption
- Digital signatures and Public Key Infrastructure (PKI)
- Hashing algorithms
- Random number generation
- Key establishment and key management methods
- Familiarity with secure communication protocols such as TLS, SSH, and IPsec.
- Strong analytical and problem-solving skills with exceptional attention to detail.
- Ability to analyze complex IT systems and evaluate cryptographic implementations.
- Excellent technical writing skills with the ability to produce clear, detailed documentation.
- Strong verbal communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
- Excellent organizational and time management skills with the ability to manage multiple priorities.
Preferred Skills & Experience
- Experience with project management or coordinating technical projects.
- Familiarity with FIPS 140-3 or other government security certification programs.
- Knowledge of the NIST SP 800 series publications, particularly beyond SP 800-53.
- Experience with Linux or command-line environments.
- Exposure to cybersecurity, software development, secure product design, or systems engineering.
U.S Citizen or Permanent Legal Resident
Corsec is at the forefront of working with top IT Security companies to achieve FIPS 140-2 and FIPS 140-3, CC and DoDIN APL certifications.