Senior Information Security Analyst

Aptonet; Columbia (MD); On-site; USD 85,000 - 115,000; Full time

Job summary

Aptonet in Columbia, Maryland, is seeking an experienced Info Security Analyst IV to support FIPS 140 validation projects in a hands-on lab environment. Responsibilities include executing security analysis, vulnerability testing, and cryptographic validation. The successful candidate will have a strong background in cryptographic technologies and a mandatory CVP certification.

Join us in a collaborative setting focused on National Defense initiatives, working alongside a dedicated team.

Qualifications

• Strong experience in cryptographic technologies and testing methodologies.
• Must possess Cryptographic Validation Program (CVP) Certification.
• Ability to work onsite in a collaborative lab setting.

Responsibilities

• Support and execute FIPS 140 validation projects.
• Perform general security analysis and vulnerability testing.
• Develop technical reports and documentation.

Skills

Cryptographic technologies

Testing methodologies

Security engineering

Troubleshooting skills

Multitasking

Education

Cryptographic Validation Program (CVP) Certification

2–4 years of relevant experience

Tools

C

C++

Python

Java

WinDBG

Visual Studio

Job description

We are seeking an experienced Info Security Analyst IV to support FIPS 140 validation projects within a hands-on lab environment. This role focuses on security analysis, cryptographic validation testing, product evaluations, automation, and technical reporting in support of National Defense initiatives. The ideal candidate will have strong experience in cryptographic technologies, testing methodologies, and security engineering, along with a mandatory Cryptographic Validation Program (CVP) Certification.

Key Responsibilities

• Support and execute FIPS 140 validation projects
• Perform general security analysis and vulnerability testing
• Conduct physical security testing and system-level logical analysis
• Evaluate products against Technology Type standards
• Perform cryptographic and Public Key Infrastructure (PKI) testing
• Execute cryptographic algorithm testing
• Develop technical reports and documentation
• Automate testing through scripting
• Develop applications to support test cases
• Assist with product architecture and design analysis
• Build and maintain testing environments
• Analyze and troubleshoot security-related issues

Required Technical Skills

• MUST HAVE Cryptographic Validation Program (CVP) Certification
• Knowledge of cryptographic concepts and technologies, including:
  • Cryptographic encryption algorithms
  • Key exchange algorithms
  • Hashing and message authentication algorithms
  • PKI
• Experience with programming languages such as:
  • C
  • C++
  • Python
  • Java
• Experience with testing automation and scripting
• Understanding of security standard requirements and product compliance
• Experience with networking concepts including subnetting and routing
• Knowledge of security protocols including:
  • SSH
  • IPsec
  • TLS
• Experience building testing environments and documenting results
• Strong troubleshooting and problem-solving skills
• Strong multitasking and time management skills

Preferred / Nice-to-Have Skills

• Experience working in a lab environment
• Experience with Python programming
• Experience with debugging tools such as:
  • WinDBG
  • Visual Studio
• Experience with entropy source statistical analysis
• Knowledge of:
  • OpenSSL
  • OpenPGP
  • Active Directory
  • X.509 certificate validation
• Vulnerability analysis and penetration testing experience
• Related certifications:
  • CCNA / CCNP / CCIE
  • JNCIA / JNCIS / JNCIP / JNCIE
• Hands-on experience with hardware testing tools such as:
  • Multi-meter
  • Signal generator
• Local to Columbia, MD area

Qualifications & Experience

• Typically requires 2–4 years of relevant experience
• Strong written and verbal English communication skills
• Ability to work onsite in a collaborative lab setting
• Previous experience supporting security validation projects preferred

About the Team / Company

The role supports the Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team in a collaborative onsite environment focused on National Defense and cybersecurity initiatives. The team consists of 12 team members and 3 project managers supporting secure communications and product validation efforts.