Associate Cc Evaluator

Highlights of the Job **Introduction** Lightship Security is a market leader in standards-based IT product security certification. We work with leading edge technology vendors from around the world to evaluate and test their products against various cyber security standards such as Common Criteria and FIPS 140. We are committed to creating real world value through continued innovation in this field. We’re looking for an Associate Security Evaluator to join our team and help support the projects in the setup, configuration, and testing against custom security requirements. Someone with a critical mindset, who is not afraid to ask questions, who is proactive, and assertive with the ability to understand different perspectives and the ability to convincingly present a logical argument. Also, someone who shares true dedication to our core values: we solve problems for our clients, we work hard with integrity, we are technical experts, we value family, and we have fun. Sound good? Here’s a little more about the job: **Key Responsibilities** - Conduct Common Criteria Evaluations - Assist in the execution of CC evaluations, ensuring compliance with program requirements and relevant standards - Set-up and configure a lab test environment and assess a product’s security architecture - Conduct analysis and assessment of system vulnerabilities, construction and/or execution of a standards-based test plan using Lightship’s Conformance Automation Platform tool, fuzzing and penetration testing - Assess documentation for compliance - Execute required tests as specified by CC Protection Profiles - Documenting and Reporting - Contribute to the preparation and submission of evaluation reports, such as security assessment reports - Ensure the timely delivery of projects within budget constraints - Maintain organized records of evaluation activities, findings, and documentation - Collaboration and Communication - Follow instructions from senior and/or intermediate evaluators - Collaborate with team members, consultants, and vendors as needed - Foster effective communication and knowledge sharing within the team - Seek guidance from senior team members and actively participate in mentorship sessions to enhance professional development - Promote Core Values - Demonstrate and promote Lightship’s core values within the organization - Uphold the values of problem-solving, integrity, technical expertise, family, and a fun work environment To excel at Lightship, you have knowledge of enterprise class networking products such as Firewalls, and Unix based Operating Systems such as RHEL and Oracle Linux. You demonstrate knowledge and expertise with the Linux operating system, virtualization technologies, cryptographic concepts, and networking fundamentals. **What You Bring** **Education and Experience** - A University degree or college diploma in a technical field is required - Must have at a minimum of 2 years experience working with enterprise IT products (RHEL, Fortinet, Cisco, etc.) **Soft Skills** - Ability to manage concurrent projects - Excellent communication skills: ability to express requirements in technical and non-technical terms to customers, peers, and management; must be able to prepare consistent and quality reports for consumption by critical customers - A proven ability to work independently - Possess creative and critical thinking skills **Technical Skills** - Knowledge of networking technologies, protocols, and information delivery such as: TCP/IP, SSL/TLS, and SSH - Experience with programming and scripting languages such as: Python, Bash and C - Demonstrative experience using Linux operating system - Demonstrative experience with virtualization technologies, such as hypervisors - Experience with vulnerability analysis and penetration testing of software targets - Knowledge of fundamental cryptographic concepts and leading cryptographic algorithms **Bonus, but not required** - Knowledge of FIPS 140-2, FIPS 140-3, Common Criteria, and other related standards **Requirements**: - Must be eligible for a Government of Canada security clearance to a minimum level of Secret - Must be able and willing to travel internationally