[Hiring] FIPS 140-3 Security Tester @DEKRA SERVICES INC

Role Description

We are seeking a highly motivated and experienced FIPS 140-3 Security Tester. In this role, you will lead FIPS 140-3 evaluations and serve as a subject matter expert in Entropy Source Validation (ESV). You will combine practical testing, technical analysis and clear communication to help customers navigate cryptographic validation requirements, while strengthening our team’s expertise.

A Day in the Life and the Impact You’ll Make:

• Delivering FIPS 140-3 evaluations, including documentation and source code reviews, test planning and execution, preparation of laboratory reports, and resolution of CMVP review comments.
• Leading entropy source assessments against NIST SP 800-90B, evaluating noise source designs, entropy claims, heuristic analyses and supporting technical evidence.
• Planning and reviewing raw noise data collection, performing IID and non-IID entropy assessments, analyzing restart test results, and interpreting outputs from NIST’s entropy assessment tools.
• Assessing conditioning components, health tests—including Repetition Count and Adaptive Proportion Tests—and the detection and handling of entropy source failures.
• Preparing and reviewing ESV submission packages, coordinating submissions and addressing technical questions throughout the validation process.
• Explaining evaluation requirements and findings to customers, identifying evidence gaps and coordinating the work needed to resolve them.
• Mentoring colleagues and improving testing methods, technical documentation and automation across our global team.

Qualifications

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or a related discipline.
• Proven experience in FIPS 140-3 evaluations and practical ownership of ESV projects, including submission preparation and resolution of reviewer comments.
• Deep knowledge of NIST SP 800-90B, supported by strong foundations in probability, statistics, min-entropy estimation and random number generation.
• Working knowledge of ISO/IEC 19790, ISO/IEC 24759, the NIST SP 800-140 series and applicable CMVP Implementation Guidance.
• A solid understanding of cryptographic implementations, key management, self-tests and SP 800-90A deterministic random bit generators.
• Programming and scripting skills for source code analysis, data processing and test automation, particularly in C/C++ and Python.
• Strong technical writing skills and the ability to explain complex findings clearly to customers and colleagues.
• The ability to work independently, exercise sound technical judgment and collaborate across an international team.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Requirements

• Must be able to withstand the rigors of travel.
• May require difficult travel and long periods of driving.
• Ability to move and conduct work with full range of motion.
• Ability to lift 25-50lbs (luggage).
• Extended periods of computer-based work.
• Extended periods of standing.

Travel Considerations

• Domestic travel; estimated 25%

Benefits

• Health care benefits: medical & prescription, dental, vision (including Domestic Partners)
• Critical Illness & Hospital Indemnity supplemental insurance
• Company Health Savings Account contribution
• Flexible Spending Account for eligible health care and dependent care expenses
• Paid time off such as vacation, sick leave, and floating holidays
• Mental and emotional support resources through our Employee Assistance Program
• Wellness Program to increase activity and health habits, with ability to earn participation rewards
• Paid Parental Leave
• Travel Assist (Domestic/International)
• 401(k) plan, with an employer match
• Company paid Short- & Long-Term Disability benefits
• Group term life insurance with options to buy-up for self and others
• Working Advantage – DEKRA’s official corporate discount program
• Education Assistance Program
• Student Loan Repayment Assistance
• Internal training and development resources to grow your career
• LEAD Forward Leadership Development Program
• Annual Career Goal Setting and Performance Review cycle participation