Junior Security Evaluator
SGS
Opportunity published from SmartRecruiters · applications stay with the original hiring source.
About the opportunity
SGS-Penumbra is seeking a Junior Security Evaluator to support testing and validation of cryptographic modules under the FIPS 140-3 Cryptographic Module Validation Program (CMVP).
This early-career role involves assessing hardware, software, and firmware against FIPS 140-3 requirements while developing deep expertise in NIST standards and cryptographic testing.
Key responsibilities
- Assist with the development and execution of FIPS 140-3 test plans in accordance with CMVP requirements.
- Review cryptographic module documentation, including security policies, design specifications, finite state models, and vendor evidence packages.
- Perform hands-on testing of cryptographic modules, including operational, physical security, and algorithm validation activities.
- Conduct Cryptographic Algorithm Validation Program (CAVP) testing using NIST-approved test methodologies and vectors.
- Document test procedures, results, observations, and findings in accordance with laboratory quality procedures.
- Support the preparation of validation reports and submission packages for CMVP review.
- Perform physical security assessments of cryptographic modules, evaluating enclosure construction, tamper evidence mechanisms, and tamper response features.
- Serve as a day-to-day technical point of contact for assigned customer projects, coordinating evidence requests and providing status updates.
Qualifications
- College degree in an IT discipline or a related technical discipline, or equivalent practical experience.
- Foundational understanding of computer systems and information security principles.
- Basic understanding of cryptographic concepts, including symmetric and asymmetric cryptography, hashing, digital signatures, and key management.
- Strong analytical, problem-solving, and attention-to-detail abilities.
- Excellent written documentation and technical communication skills.
- Ability to manage multiple tasks and deadlines in a professional services environment.
- Ability to obtain any required background checks or security clearances.
- Ability to perform hands-on hardware testing activities in a laboratory environment and travel occasionally to customer locations.
Nice to have
- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or Information Technology.
- Familiarity with FIPS 140-2, FIPS 140-3, Common Criteria, or other security certification programs.
- Experience with Linux operating systems and command-line tools.
- Experience with Python, Bash, or other scripting languages.
- Exposure to embedded systems, firmware, hardware security modules (HSMs), or secure hardware development.
Benefits
- Medical, dental, and vision insurance, plus life insurance and employee assistance programs.
- 401(k) with company match and immediate vesting upon enrollment.
- Professional growth opportunities including online training courses, development experiences, and tuition reimbursement.
- Work-life balance benefits including paid time off and family leave.
Job details
- Expected salary: $46,000 to $62,000 per year, depending on skills, experience, and qualifications.
- Position anticipated to close November 2, 2026.
About the company
SGS-Penumbra provides specialized security evaluation and testing services. The company is committed to technical excellence, regulatory compliance, and supporting professional growth within the cybersecurity and cryptography domains.
Application: UpVagas lists this opportunity from the hiring company or its recruitment platform. The application is completed at the original source.
Full listing
UpVagas condensed repetitive or legal boilerplate to make this page easier to read. The original hiring source contains the complete job description.
