Job Title or Location

Associate CC Evaluator

Lightship Security - 4 Jobs
Ottawa, ON
Full-time
Experienced
Company Benefits
Disability Insurance
Posted 17 days ago
Salary:

Highlights of the Job

Introduction

Lightship Security is a market leader in standards-based IT product security certification. We work with leading edge technology vendors from around the world to evaluate and test their products against various cyber security standards such as Common Criteria and FIPS 140. We are committed to creating real world value through continued innovation in this field.

We're looking for an Associate Security Evaluator to join our team and help support the projects in the setup, configuration, and testing against custom security requirements. Someone with a critical mindset, who is not afraid to ask questions, who is proactive, and assertive with the ability to understand different perspectives and the ability to convincingly present a logical argument. Also, someone who shares true dedication to our core values: we solve problems for our clients, we work hard with integrity, we are technical experts, we value family, and we have fun.

Sound good? Here's a little more about the job:

Key Responsibilities

  • Conduct Common Criteria Evaluations 
    • Assist in the execution of CC evaluations, ensuring compliance with program requirements and relevant standards
    • Set-up and configure a lab test environment and assess a product's security architecture 
    • Conduct analysis and assessment of system vulnerabilities, construction and/or execution of a standards-based test plan using Lightship's Conformance Automation Platform tool, fuzzing and penetration testing
    • Assess documentation for compliance 
    • Execute required tests as specified by CC Protection Profiles 
  • Documenting and Reporting 
    • Contribute to the preparation and submission of evaluation reports, such as security assessment reports
    • Ensure the timely delivery of projects within budget constraints 
    • Maintain organized records of evaluation activities, findings, and documentation 
  • Collaboration and Communication
    • Follow instructions from senior and/or intermediate evaluators
    • Collaborate with team members, consultants, and vendors as needed
    • Foster effective communication and knowledge sharing within the team 
    • Seek guidance from senior team members and actively participate in mentorship sessions to enhance professional development 
  • Promote Core Values 
    • Demonstrate and promote Lightship's core values within the organization 
    • Uphold the values of problem-solving, integrity, technical expertise, family, and a fun work environment

The Ideal Candidate

To excel at Lightship, you have knowledge of enterprise class networking products such as Firewalls, and Unix based Operating Systems such as RHEL and Oracle Linux. You demonstrate knowledge and expertise with the Linux operating system, virtualization technologies, cryptographic concepts, and networking fundamentals.

What You Bring

Education and Experience

  • A University degree or college diploma in a technical field is required
  • Must have at a minimum of 2 years experience working with enterprise IT products (RHEL, Fortinet, Cisco, etc.)

Soft Skills

  • Ability to manage concurrent projects
  • Excellent communication skills: ability to express requirements in technical and non-technical terms to customers, peers, and management; must be able to prepare consistent and quality reports for consumption by critical customers
  • A proven ability to work independently
  • Possess creative and critical thinking skills

Technical Skills

  • Knowledge of networking technologies, protocols, and information delivery such as: TCP/IP, SSL/TLS, and SSH
  • Experience with programming and scripting languages such as: Python, Bash and C
  • Demonstrative experience using Linux operating system
  • Demonstrative experience with virtualization technologies, such as hypervisors
  • Experience with vulnerability analysis and penetration testing of software targets
  • Knowledge of fundamental cryptographic concepts and leading cryptographic algorithms

Bonus, but not required

  • Knowledge of FIPS 140-2, FIPS 140-3, Common Criteria, and other related standards

Requirements

  • Must be eligible for a Government of Canada security clearance to a minimum level of Secret
  • Must be able and willing to travel internationally < 10% and hold a valid passport

What's in it for you?

  • Health & Wellness: We prioritize your well-being. Our offerings include health, dental, life, and long-term disability insurance to support your health and overall wellness.
  • Development Opportunities: Cultivating employee career growth is important to us. We provide professional support, coaching, a training reimbursement program, and more to empower your development.
  • Social: To promote engagement and teamwork, we come together at a range of company-organized events throughout the year.
  • Culture: We offer an innovative, collaborative, and dynamic workplace culture by fostering open communication, encouraging creativity, and promoting continuous learning and growth among our team members.
  • Flexibility: We try to accommodate real-life as much as possible and know that work is just a part of our daily lives. We offer a hybrid work model, and we expect the successful candidate to come into our office 2 to 3 days a week.

The successful candidate will work from our office in Ottawa, ON.

Lightship is an equal opportunity employer. Accommodations will be provided at all stages of the hiring process. We ask applicants to make their needs known in advance. We thank all applicants for their interest in this opportunity. Only those selected for an interview will be contacted. No agencies, please.