FIPS 140 Entropy Specialist

The Cryptographic Security Testing (CST) Lab within Accredited Testing and Evaluation (AT&E) at Leidos currently has an opening for a FIPS 140 Entropy Specialist. This is a technical position within CSTL. The FIPS 140 Entropy Specialist acts as a Subject Matter Expert in the field of entropy within the scope of the Entropy Source Validation (ESV) program run by the NIST and is expected to lead entropy sources through all phases of work in order to achieve ESV certification.

• Analysis of entropy sources against NIST Special Publication (SP) 800-90B

• Statistical testing of noise datasets

• Review of entropy assessment reports and public use documents

• Submission of ESV packages through the NIST Entropy Source Validation Test System (ESVTS)

• General security analysis

• Cryptographic algorithm testing

• Source code review activities

• Test case development/execution

• Technical report writing and review

• Minimum Bachelor of Science in Mathematics, Computer Science, Computer Engineering or related technical discipline.

• Expert knowledge of SP 800-90B and entropy related requirements from FIPS Implementation Guidance (IG).

• Familiarity of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.

• Experience with various programming languages (C, C++, Python or Java) and development environments.

• Ability to comprehend security standard requirements and apply them to products.

• Knowledge of common security related protocols and their design (i.e. SSH, IPsec, TLS, etc.).

• Experience building testing environments, performing testing and reporting results (technical writing).

• Strong problem-solving skills.

• Strong multitasking and time management.

• CVP certification is not required for this role, however, it is highly recommended and should be pursued to enhance skills and career development within the field.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers.

We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to)

responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.