About this role
Job Specification: ------------------- • The selected candidate will work on varied computer security Common Criteria Evaluation and FIPS 140-2 validation projects • Supervise conduct of CC Evaluation activities. • Maintains an ongoing dialogue with the director CC lab about the status and conduct of security assessments • Responsible for administration and technical activities of Screening and Evaluation Lab. • Keep track of progress of screening and evaluation activities in the lab. • Ensure that thorough, precise and comprehensive screening and evaluation reports are being prepared. • Ensure that procedures for creating, storing, configuration management (CM), accessing, archiving and disposing of screening and evaluation activities records are being followed by teams. • Observe and ensure that the highest standards of confidentiality for the information provided for screening and evaluation are being followed. • Executes certification effort schedules and test methods in accordance with Pakistan CC Scheme and CC. • Understands and complies with test methods and procedures • Reports details of all nonconforming work and supplies that prohibit the accurate conduct of security assessments (observation reports) • Physical security testing • System-level logical analysis • Smart card’s security evaluation via tools and programming • KMS Software security evaluation, vulnerability assessment and penetration testing via tools and techniques • Develop and analysis of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc. Qualification: ---------------- • MS/BS in a relevant discipline of Computer Engineering or Electrical Engineering such as Cyber Security, Information Security, Network Security, Information Technology, Information Assurance, etc. with minimum of 5 years’ experience of working in the versatile areas of information security evaluations at any relevant department, organization or agency at management positions. • Knowledgeable of all relevant standards and publications pertaining to the specific tests (e.g. FIPS140-x, Common Criteria, NSS, NIST Publications, ISO27k, CIS-CAT benchmarking etc.) found on the lab’s scope. Location of Job: ------------------ - Islamabad Other Details: --------------- • Working experience/ practical knowledge in fields of Cyber Security, Information Security, Network Security, Embedded systems, wireless/ radio communications, hardware devices/ gadgets, RF/ Microwaves, Software security testing and Mobile applications security testing (iOS & Android). • Professional Certifications and Knowledge of relevant standards and publications pertaining to the specific areas (e.g. Memory Forensics, Penetration testing, FCC/ CE standards, Electromagnetic Emission Testing, CISA, NIST Publications, ISO27k, etc.) would be an added advantage. • Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, random number generators, etc. • Knowledge of common security related protocols and their design (i.e. SSH, IPsec, TLS, etc.). • Vulnerability Analysis and/or penetration testing experience/expertise. • Knowledge of electrical engineering as applied to computer architecture (e.g., circuit boards, processors, chips, and computer hardware). • Knowledge of microprocessors. • Knowledge of industry-standard and organizationally accepted analysis principles and methods. • Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures. • Knowledge of human-computer interaction principles. - 5 years of general age relaxation has already been added.