|
|
 |
About COACT : Employment |
| |
We welcome your resume. Please put the position you are applying for in the subject line and send your resume and letter of inquiry to info@coact.com.
Senior Security Test Engineer
COACT is looking for individuals with a technical background to perform consulting and testing of a wide range of IT security products to the FIPS 140-2 standard.
Responsibilities:
Responsible for testing and evaluating security system cryptographic modules through documentation review, source code review, general operation of the system and overall system operational security testing.
Responsible for security testing of products to the FIPS 140-2, FIPS 201 (PIV), and SCAP standards.
Conduct analysis and verification of security testing results.
Prepare technical test reports detailing the results of security testing.
Interface with customers, as necessary, during the testing process.
Technical Skills/Educational Requirements:
1 – 2 years experience in one of the following technical areas:
- Security Engineering
- Security Architecture Design
- Vulnerability Assessment and Penetration Testing
- Quality Assurance Testing
- Product Evaluation against Government Testing Standards
BS in Engineering, Computer Science, or Math (MS degree in engineering or related science is a plus).
Ability to analyze data, processes, and functions
Experience with encryption technologies and familiarity with FIPS 140-2 is a plus.
Knowledge of UNIX, Linux, or Solaris is a plus.
Jr. Test Engineer
This position primarily involves the analysis and security testing of devices implementing cryptography to the FIPS 140-2 standard. The ideal candidate must be willing to learn applicable security standards, possess strong verbal and written communication skills, and be amenable to travel, as necessary. The Jr. Test Engineer will test and perform documentation reviews of products to confirm compliance to the FIPS 140-2 standard. This position will also include limited vendor interaction and on-site analysis, as necessary. Familiarity with multiple programming languages is a plus. Knowledge of cryptography is not a prerequisite.
Requirements:
One to three years IT work experience
Two (2) year Associate degree in electronic/electrical engineering, Communications, Engineering, or Computer Science, or an additional 2 years of relevant work experience
Sr. Test Engineer
This position involves the formal analysis and testing of cryptographically enabled IT security products under the FIPS 140-2 standard for product testing. Responsibilities include coordinating testing evidence delivery with vendors, performing testing and technical documentation analysis to the FIPS 140-2 standard, and writing test reports summarizing test findings. The ideal candidate will have knowledge of cryptographic standards and strong written and verbal skills. Familiarity with multiple programming languages is a plus.
Requirements:
Three to five years IT analyst experience
BS degree in electronic/electrical engineering, Communications, Engineering, or Computer Science or applicable work experience.
Security Technician I
Security Technician I (STI) needed that has prior experience with installing, troubleshooting, and testing various types of network equipment and systems.
Will need to participate in the development of Security Targets and Protection Profiles under the Common Criteria Scheme. Will need to learn and participate in formal evaluations under the Common Criteria Scheme for product evaluations. A Security Technician I position is the entree level for the COACT Intern Program. Two (2) year Associate degree in electronic/electrical engineering, Communications, Engineering, or Computer Science required.
Security Technician II
Security Technician (STII) needed that has prior experience with installing, troubleshooting, and testing various types of network equipment and systems. Must be able to develop Security Targets and Protection Profiles under the Common Criteria Scheme. Will need to conduct formal analysis and testing under the Common Criteria Scheme for product evaluations. BS degree in electronic/electrical engineering, Communications, Engineering, or Computer Science required.
Certification & Accreditation Engineer
Certification and Accreditation (C&A) engineer needed to prepare Certification Packages. Must be familiar with FISMA and the relevant guidance issued by the National Institute of Standards including: SP 800-37, SP 800-26, SP 800-53, SP 800-34, and 800-34. Experience preparing prior C&A packages required. Should have solid understanding of security architecture, policies, and security capabilities of leading operating systems. Certifications such as CISM, CISSP, or MCSE helpful. BA or BS required.
|
|
|