FIPS 140-3 Security Tester

Dekra Services Inc; United States; Remote; USD 76,000 - 111,000; Full time

Benefits offered by this job

401(k) plan

Health insurance

Paid time off

Disability benefits

Employee assistance program

Job summary

DEKRA North America is seeking a FIPS 140-3 Security Tester to lead evaluations, review entropy sources, and coordinate ESV submissions. The role requires deep cryptography knowledge, hands-on testing, and the ability to communicate findings clearly to customers.

The position is remote within the United States with domestic travel up to 25%. Competitive compensation and a comprehensive benefits package are provided.

Qualifications

• Degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or related discipline.
• Proven experience in FIPS 140-3 evaluations and ownership of ESV projects.
• Strong knowledge of NIST SP 800-90B and entropy estimation methods.
• Working knowledge of ISO/IEC 19790 and CMVP guidance.
• Understanding of cryptographic implementations and key management.

Responsibilities

• Deliver FIPS 140-3 evaluations, including docs, tests, and CMVP responses.
• Lead entropy source assessments and analyze noise data and NIST tools.
• Review data collection, IID/non‑IID entropy, and restart test results.
• Assess conditioning components and entropy source failures.
• Prepare and review ESV submission packages and coordinate questions.
• Explain evaluation requirements to customers and identify evidence gaps.
• Mentor colleagues and improve testing methods and automation.

Skills

FIPS 140-3 evaluations

ESV projects

NIST SP 800-90B

ISO/IEC 19790

cryptographic implementations

C/C++

Python

technical writing

independent work

Education

Computer Science or related discipline

Tools

CMVP Implementation Guidance

Job description

FIPS 140-3 Security Tester

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Carrier_Wireless Regular Full Time US Remote, US

3 days ago Requisition ID: 1120

Salary Range: $76,100.00 To $111,000.00 Annually

In compliance with applicable pay transparency requirements, the application window for this position is expected to close on October 21, 2026, subject to change based on business need.

A Day in the Life and the Impact You’ll Make:

We are seeking a highly motivated and experienced FIPS 140-3 Security Tester. In this role, you will lead FIPS 140-3 evaluations and serve as a subject matter expert in Entropy Source Validation (ESV). You will combine practical testing, technical analysis and clear communication to help customers navigate cryptographic validation requirements, while strengthening our team’s expertise.

What You’ll Do:

• Delivering FIPS 140-3 evaluations, including documentation and source code reviews, test planning and execution, preparation of laboratory reports, and resolution of CMVP review comments.
• Leading entropy source assessments against NIST SP 800-90B, evaluating noise source designs, entropy claims, heuristic analyses and supporting technical evidence.
• Planning and reviewing raw noise data collection, performing IID and non-IID entropy assessments, analyzing restart test results, and interpreting outputs from NIST’s entropy assessment tools.
• Assessing conditioning components, health tests—including Repetition Count and Adaptive Proportion Tests—and the detection and handling of entropy source failures.
• Preparing and reviewing ESV submission packages, coordinating submissions and addressing technical questions throughout the validation process.
• Explaining evaluation requirements and findings to customers, identifying evidence gaps and coordinating the work needed to resolve them.
• Mentoring colleagues and improving testing methods, technical documentation and automation across our global team.

What You’ll Bring:

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or a related discipline.
• Proven experience in FIPS 140-3 evaluations and practical ownership of ESV projects, including submission preparation and resolution of reviewer comments.
• Deep knowledge of NIST SP 800-90B, supported by strong foundations in probability, statistics, min-entropy estimation and random number generation.
• Working knowledge of ISO/IEC 19790, ISO/IEC 24759, the NIST SP 800-140 series and applicable CMVP Implementation Guidance.
• A solid understanding of cryptographic implementations, key management, self-tests and SP 800-90A deterministic random bit generators.
• Programming and scripting skills for source code analysis, data processing and test automation, particularly in C/C++ and Python.
• Strong technical writing skills and the ability to explain complex findings clearly to customers and colleagues.
• The ability to work independently, exercise sound technical judgment and collaborate across an international team.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Physical Considerations:

• Must be able to withstand the rigors of travel.
• May require difficult travel and long periods of driving.
• Ability to move and conduct work with full range of motion.
• Ability to lift 25-50lbs (luggage).
• Extended periods of computer-based work.
• Extended periods of standing.

Travel Considerations:

• Domestic travel; estimated 25%

What You’ll Receive for the Value You Bring:

Compensation:

DEKRA North America’s compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $76,100 annually in our lowest geographic market up to $111,000 annually in our highest geographic market. Actual pay is based on several factors including market location and position-related knowledge, skills, and experience.

DEKRA North America strives to provide a competitive benefits package to colleagues and promotes physical, emotional, and financial well-being. Colleagues can self-select from our benefits to create a package unique to their needs. These benefits include access to competitive health care and retirement benefits, paid time off, mental health well-being resources, and opportunities to learn and develop. Below is a list of benefits we offer our colleagues:

• Critical Illness & Hospital Indemnity supplemental insurance
• Company Health Savings Account contribution
• Flexible Spending Account for eligible health care and dependent care expenses
• Paid time off such as vacation, sick leave, and floating holidays
• Mental and emotional support resources through our Employee Assistance Program
• Wellness Program to increase activity and health habits, with ability to earn participation rewards
• Travel Assist (Domestic/International)
• 401(k) plan, with an employer match
• Company paid Short- & Long-Term Disability benefits
• Group term life insurance with options to buy-up for self and others
• Working Advantage – DEKRA’s official corporate discount program

Growth and Development Benefits:

• Education Assistance Program
• Student Loan Repayment Assistance
• Internal training and development resources to grow your career
• Annual Career Goal Setting and Performance Review cycle participation

DEKRA North America is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

DEKRA North America is committed to working with and providing reasonable accommodation to individuals with physical and mental disabilities. If you need special assistance or accommodation while seeking employment, please email [e-mail], or call [phone]. We will make a determination on your request for reasonable accommodation on a case-by-case basis.

DEKRA North America will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay.

DEKRA North America participates in the E-Verify program to confirm eligibility to work in the United States.

• Reports to: Managing Director
• Work Model: Remote
• Work Location:Remote
• Supervises Others: No
• Status: Full-time, Regular
• FLSA Classification: Exempt
• Visa Sponsorship Eligibility:This position is not eligible for Visa Sponsorship.
• Relocation Eligibility: This position is not eligible for relocation.

About Us:

As a global provider of comprehensive services and solutions, we help our customers improve their safety, security, and sustainability outcomes. DEKRA is the world’s leading testing, inspection and certification (TIC) companies offering innovative professional services in the fields of vehicle inspection, expert appraisals, industrial product testing & certification, management system certifications, leadership consulting, and much more. DEKRA is a purpose-driven organization with a deep passion to make the world a safer place on the road, at work, and at home. In DEKRA, you will be part of a continuously growing organization with a 100-year history involved in more than 50 countries on five continents.

We hope you’ll consider a career with DEKRA North America as we strive to become the Global Partner for a Safe World!