FIPS 140-3 Security Tester

DEKRA North America, Inc.; Idaho; Remote; USD 76,000 - 111,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Education assistance

Job summary

DEKRA North America, Inc. is seeking a skilled FIPS 140-3 Security Tester to lead evaluations and serve as a subject matter expert in Entropy Source Validation (ESV).

You will apply practical testing, analysis and clear communication to help customers navigate cryptographic validation requirements. You will deliver evaluations, review evidence, and coordinate CMVP submissions while mentoring teammates and improving testing methods across our global team.

Qualifications

• Degree in Computer Science, Mathematics, Cybersecurity, or related discipline.
• Proven FIPS 140-3 evaluation experience and ESV project ownership.
• Deep knowledge of NIST SP 800-90B and entropy estimation.

Responsibilities

• Deliver FIPS 140-3 evaluations, docs, and CMVP review responses.
• Lead entropy source assessments per NIST SP 800-90B.
• Review raw noise data, IID/non-IID analyses, and tool outputs.
• Assess conditioning components and health tests.
• Prepare and coordinate ESV submissions and address questions.
• Explain evaluation findings to customers and mentor colleagues.

Skills

FIPS 140-3 evaluations

Entropy source validation

NIST SP 800-90B

CMVP guidance knowledge

Cryptographic implementations

C/C++ and Python

Technical writing

Independent work

Education

BSc in Computer Science / related

Tools

C/C++

Python

NIST validation tools

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

FIPS 140-3 Security Tester

Regular Full Time US Remote, US

2 days ago Requisition ID: 1120

Salary Range: $76,100.00 To $111,000.00 Annually

In compliance with applicable pay transparency requirements, the application window for this position is expected to close on October 21, 2026, subject to change based on business need.

A Day in the Life and the Impact You’ll Make:

We are seeking a highly motivated and experienced FIPS 140-3 Security Tester. In this role, you will lead FIPS 140-3 evaluations and serve as a subject matter expert in Entropy Source Validation (ESV). You will combine practical testing, technical analysis and clear communication to help customers navigate cryptographic validation requirements, while strengthening our team’s expertise.

What You’ll Do:

• Delivering FIPS 140-3 evaluations, including documentation and source code reviews, test planning and execution, preparation of laboratory reports, and resolution of CMVP review comments.
• Leading entropy source assessments against NIST SP 800-90B, evaluating noise source designs, entropy claims, heuristic analyses and supporting technical evidence.
• Planning and reviewing raw noise data collection, performing IID and non-IID entropy assessments, analyzing restart test results, and interpreting outputs from NIST’s entropy assessment tools.
• Assessing conditioning components, health tests—including Repetition Count and Adaptive Proportion Tests—and the detection and handling of entropy source failures.
• Preparing and reviewing ESV submission packages, coordinating submissions and addressing technical questions throughout the validation process.
• Explaining evaluation requirements and findings to customers, identifying evidence gaps and coordinating the work needed to resolve them.
• Mentoring colleagues and improving testing methods, technical documentation and automation across our global team.

What You’ll Bring:

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or a related discipline.
• Proven experience in FIPS 140-3 evaluations and practical ownership of ESV projects, including submission preparation and resolution of reviewer comments.
• Deep knowledge of NIST SP 800-90B, supported by strong foundations in probability, statistics, min-entropy estimation and random number generation.
• Working knowledge of ISO/IEC 19790, ISO/IEC 24759, the NIST SP 800-140 series and applicable CMVP Implementation Guidance.
• A solid understanding of cryptographic implementations, key management, self-tests and SP 800-90A deterministic random bit generators.
• Programming and scripting skills for source code analysis, data processing and test automation, particularly in C/C++ and Python.
• Strong technical writing skills and the ability to explain complex findings clearly to customers and colleagues.
• The ability to work independently, exercise sound technical judgment and collaborate across an international team.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Physical Considerations:

• Must be able to withstand the rigors of travel.
• May require difficult travel and long periods of driving.
• Ability to move and conduct work with full range of motion.
• Ability to lift 25-50lbs (luggage).
• Extended periods of computer-based work.
• Extended periods of standing.

Travel Considerations:

• Domestic travel; estimated 25%

What You’ll Receive for the Value You’ll Bring:

Compensation:

DEKRA North America’s compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $76,100 annually in our lowest geographic market up to $111,000 annually in our highest geographic market. Actual pay is based on several factors including market location and position-related knowledge, skills, and experience.

DEKRA North America strives to provide a competitive benefits package to colleagues and promotes physical, emotional, and financial well-being. Colleagues can self-select from our benefits to create a package unique to their needs. These benefits include access to competitive health care and retirement benefits, paid time off, mental health well-being resources, and opportunities to learn and develop. Below is a list of benefits we offer our colleagues:

• Critical Illness & Hospital Indemnity supplemental insurance
• Company Health Savings Account contribution
• Flexible Spending Account for eligible health care and dependent care expenses
• Paid time off such as vacation, sick leave, and floating holidays
• Mental and emotional support resources through our Employee Assistance Program
• Wellness Program to increase activity and health habits, with ability to earn participation rewards
• Travel Assist (Domestic/International)
• 401(k) plan, with an employer match
• Company paid Short- & Long-Term Disability benefits
• Group term life insurance with options to buy-up for self and others
• Working Advantage – DEKRA’s official corporate discount program

Growth and Development Benefits:

• Education Assistance Program
• Student Loan Repayment Assistance
• Internal training and development resources to grow your career
• Annual Career Goal Setting and Performance Review cycle participation

This list provides an overview of benefits provided for US-based colleagues; the DEKRA North America Employee Benefits Guide outlines plan details and further related eligibility requirements.

• Reports to: Managing Director
• Work Model: Remote
• Work Location:Remote
• Supervises Others: No
• Status: Full-time, Regular
• FLSA Classification: Exempt
• Visa Sponsorship Eligibility:This position is not eligible for Visa Sponsorship.
• Relocation Eligibility: This position is not eligible for relocation.

About Us:

As a global provider of comprehensive services and solutions, we help our customers improve their safety, security, and sustainability outcomes. DEKRA is the world’s leading testing, inspection and certification (TIC) companies offering innovative professional services in the fields of vehicle inspection, expert appraisals, industrial product testing & certification, management system certifications, leadership consulting, and much more. DEKRA is a purpose-driven organization with a deep passion to make the world a safer place on the road, at work, and at home. In DEKRA, you will be part of a continuously growing organization with a 100-year history involved in more than 50 countries on five continents.

We hope you’ll consider a career with DEKRA North America as we strive to become the Global Partner for a Safe World!

DEKRA North America is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law

DEKRA North America is committed to working with and providing reasonable accommodation to individuals with physical and mental disabilities. If you need special assistance or accommodation while seeking employment, please email [e-mail], or call [phone]. We will make a determination on your request for reasonable accommodation on a case-by-case basis.

DEKRA North America will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay.

DEKRA North America participates in the E-Verify program to confirm eligibility to work in the United States.