Careers.

The Security Engineer will be a part of and lead a team of engineers to assess the compliance of devices against the Common Criteria and FIPS 140 certification schemes.

Responsibilities include:

• Conduct and manage Common Criteria evaluations against US NIAP approved protection profiles and custom ST/EAL evaluations,
• Participation in FIPS 140 crypto validations,
• Configure and test network devices such as routers, switches, firewalls, IDS/IPS, etc.,
• Develop evaluation documentation,
• Prepare and execute test plans,
• Participation in technical communities,
• Participation in Gap Analysis Workshops

For this position, a solid understanding of foundational networking concepts (OSI model, TCP/IP, Ethernet, etc.) is essential. Experience working with and an understanding of secure communications protocols (TLS, SSH, IPsec, MACsec, etc.), cryptographic algorithm suites is of utmost importance.

Required Qualifications

• 2-4 years of direct experience with FIPS and/or CC standards
• In depth understanding of network devices, ability to configure, deploy and troubleshoot network and configurations
• Understanding of foundational networking protocols as well as secure communications protocols and the ability to describe correct behavior and identify anomalies
• Ability to use tools such as Wireshark, tcpdump or similar to record and analyze packet captures of network traffic
• Experience working with Unix-like operating systems (Linux, BSD, Solaris)
• Demonstrated ability to think critically and adapt to new circumstances and technology platforms
• Excellent written and verbal communication skills
• Program management experience in a technical environment to plan, schedule and execute project tasks
• Experience working directly with customers

Desired Qualifications

• Engineering Bachelor’s or Master’s degree
• Experience with networking equipment from multiple vendors
• Familiarity with wireless networking, VoIP, etc.
• Security certifications such as Security+, GSEC, CCNA, COMPTIA Network+
• Familiarity with one or more languages (Perl, Python, BASH, etc.)

Acumen is looking for an up-and-coming rock star engineer for the position of Security Engineer I. A Security Engineer I at Acumen is an entry-level position that requires zero to two years of experience in the product security field. In this role, the engineer will be working with varied Fortune 100 and other industry leading companies, partnering with their engineers to successfully certify ICT products against the FIPS 140 and Common Criteria standards. You will be exposed to a wide variety of technologies and have the opportunity to work on bleeding edge products. You will be able to deep dive into product architectures and analyze feature implementations from a security perspective.

What we are looking for

The ideal candidate will have broad understanding of various technologies such as networking, Operating Systems, Computer Architecture etc. and be well versed in at least one of these technological areas. Additionally ability to code in C/C++ is a very big advantage.

To be successful in this role, the engineer should be passionate about technology in general and security in particular.

A Security Engineer I has the ability to quickly digest and interpret complex technical problems and formulate creative solutions acceptable to multiple parties with varying motivations. Excellent communication and interpersonal skills are an essential component of this role.

Education and Experience:

• Bachelors (Master’s preferred) in Computer Science, Computer Engineering, other related field, or equivalent experience.
• Deep understanding of at least two of the following technologies: Networking, Operating Systems, Computer Architecture, Mobile Platforms, Software Programming.
• Ability to deep dive and understand C, C++ and Java code
• Perl, PHP, TCL or other scripting experience
• Deep familiarity with Linux or other *NIX OS

Bonus Qualifications:

• Product development experience
• C, C++ and/or Java programming experience
• Experience with OpenSSL, OpenSSH, Apache, Tomcat, GNUPG
• Experience with Cisco IOS
• Programming on Raspberry Pi
• Understanding of cryptographic algorithms such as AES, TDES, RSA, SHA, HMAC, ECC etc
• Strong oral and written communication skills.