Security Certification Engineer (Bay Area)

About Fortanix:  

In today's world, where data spreads across various clouds and devices, traditional security measures aren't enough. Businesses need a dynamic approach to defend against constant cyber threats and ensure agile data security. Fortanix leads the way in data-centric cybersecurity for hybrid multicloud environments, using advanced cryptography, encryption, and confidential AI solutions.  

As data breaches become more frequent and traditional defenses fall short, we focus on data exposure management to keep your information safe. Our unified data security platform addresses vulnerabilities in hybrid multicloud environments, defends against threats, and makes it easier to discover, assess, and fix data exposure risks. Whether implementing a Zero Trust model or preparing for the post-quantum computing era, we help businesses worldwide protect their most sensitive data, wherever it is. 

Our commitment to solving the world’s toughest data security challenges has earned Fortanix multiple Cybersecurity Excellence and Innovation Awards, as well as recognition from industry giants such as Microsoft, Intel, ServiceNow, and Snowflake. 

Our team includes industry leaders and cryptography experts, creating a culture of trust, innovation and collaboration where every voice is valued. Recognized as a Great Place to Work, we're looking for passionate individuals to help us shape the future of data security and work towards a safer digital future. 

We are looking for a Security Certification Engineer based in the US, preferrably in the Bay Area. The ideal candidate will have experience with the FIPS 140-2/3 certification process.

Responsibilities include:

• Conducting FIPS 140-2 and FIPS 140-3 evaluations
• Assisting in the development and review of all test reports and required certification documentation
• Leading CAVP algorithm testing using ACVP/ACVTS
• Supporting SP800-90B entropy evaluations
• Reviewing/commenting on submission-related output from other Engineers
• Participating in external technical communities
• Leading internal training and mentorship activities

Requirements

• Bachelor’s Degree in Electrical Engineering, Computer/Information Science, Information Assurance/Cybersecurity, or equivalent degree (Masters Degree preferred)

• 4+ years of technical experience in FIPS 140-2/3 or a related area
• Proficiency with ACVP and ESV
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc.
• Experience with various programming languages (C, C++, Python or Java) and development environments.
• Excellent communication (written/verbal) skills and analytical skills
• High proficiency with customer interactions
• High proficiency in testing security products
• High proficiency in understanding and solving technical problems
• High proficiency in applying standards to different types of technology
• Ability to understand and speak on technical and programmatic levels

Benefits

• We offer a collaborative work environment, amazing equity, great benefits, competitive salary, and the opportunity to redefine cloud computing.  

• Unlimited PTO (it’s between you and your work!) 
• Quarterly recharge days 
• 40 hours of Volunteer Time Off/year 
• Internet stipend 
• Friendly culture that brings the best out of everybody 
• 401k

Fortanix is an equal opportunity employer that celebrates diversity and is committed to creating an inclusive workplace with equal opportunity for all applicants and teammates. Our goal is to recruit the most talented people from a diverse candidate pool regardless of race, color, religion, age, gender, gender identity, sexual orientation or any other status. If you’re interested in working in a fast growing, exciting working environment – we encourage you to apply!