About this role
Job Specification: ------------------- • Responsible for overall administration and technical activities of labs. • Supervise conduct of forensic investigations, product screening and evaluations activities. • Manage of evaluation investigations and evaluation progress, meetings and correspondence. • Ensure that thorough, precise and comprehensive evaluation reports are being prepared. • Ensure that procedures for creating, storing, configuration management (CM), accessing, archiving and disposing of security assements and product screenings & evaluations activities records are being followed by teams. • Observe and ensure that the highest standards of confidentiality for the information provided for forensic investigations and evaluations especially proprietary information are being followed. • Provide technical summary of findings in accordance with established reporting procedures. • Interact with Public/Private/Defence/Academia sectors for coordination, service delivery and project execution etc Qualification: --------------- PhD/MS in a relevant discipline of Computer Science or Computer Engineering or Electrical Engineering such as Cyber Security, Information Security, Network Security, Information Technology, Information Assurance, etc. with minimum of twelve years’ experience of working in the versatile areas of information security evaluations at any relevant department, organization or agency at management positions. Knowledgeable of all relevant standards and publications pertaining to the specific tests (e.g. FIPS140-x, Common Criteria, PSS, Quantum and Post Quantum Cryptography NIST Publications, ISO27k, CIS-CAT benchmarking etc.) found on the lab’s scope. Professional Certifications in Cyber Security and Information Security such as CISSP, CISA, Common Criteria Certified Evaluator, ISO/IEC 27001 LA/LI, ISO/IEC 17025 LA would be a plus. Preferably PSS and Common Criteria trained and certified. Location of Job: ----------------- - Islamabad Other Details: ---------------- working experience/ practical knowledge in fields of Cyber Security, Quantum/Post Quantum Cryptography, Information Security, Network Security, Embedded systems, wireless/ radio communications, hardware devices/ gadgets, RF/ Microwaves, Software security testing and Mobile applications security testing (iOS & Android). Professional Certifications and Knowledge of relevant standards and publications pertaining to the specific areas (e.g. Quantum technologies, Memory Forensics, Penetration testing, FCC/ CE standards, Electromagnetic Emission Testing, CISSP, CISA, OSCP NIST Publications, ISO27k, etc.) would be an added advantage. Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc. Hands on experience in developing Security standards, procedures and policies. Ability to comprehend security standard requirements and apply them to products. Product evaluations against Technology Type standards (Protection Profiles). Hands on experience on software testing tools. Knowledge of X.509 certificate validation. Experience in investigative implications of cryptographic equipment. Knowledge of Security Assessment and Authorization process. Ability to translate data and test results into evaluative conclusions. Preferably experienced with PSS development. - 5 years of general age relaxation has already been added.