Product Security Engineer - Federal Certifications

Product Security Engineer - Federal Certifications

This role has been designated as 'Remote/Teleworker', which means you will primarily work from home.

Who We Are:

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work.

We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today's complex world.

Our culture thrives on finding new and better ways to accelerate what's next.

We know varied backgrounds are valued and succeed here.

We have the flexibility to manage our work and personal needs.

We make bold moves, together, and are a force for good.

If you are looking to stretch and grow your career our culture will embrace you.

Open up opportunities with HPE.

Job Description:

Roles and Responsibilities:


* Assist in the execution of Common Criteria, FIPS, and DoDIN-APL certifications across all HPE Aruba Networking product lines


* Operate as a representative of HPE Aruba Networking with various accredited labs during the evaluation process


* Assist in the generation of documentation (e.g.

FIPS security policies, CC security targets), whether creating/editing directly or working with an external author.


* Provide consulting, information, and advice to developers and QA around how certification works.


* Attend regularly scheduled meetings with accredited labs and engineering/QA to ensure project milestones are on track.


* Communicate gaps and deficiencies found by accredited testing labs to the relevant engineering and product teams to ensure remediation


* Monitor government standards and communicate to management and engineering when changes are made that may impact a release (e.g.

change to a security requirement under Common Criteria).


* Assist in the development, compliance, and maintenance of FIPS compliant cryptographic module(s).

Qualifications and Education Requirements:


* BS in Electrical Engineering, Computer Science, or related technical field.

MS preferred.


* Background in software engineering including C/C++, Python and/or Golang.

Ability to read and understand source code in C is a must.


* Minimum 2 years of experience working with cryptographic modules in a technical capacity.


* Minimum 3 years of experience in software development of cryptographic modules.


* Minimum 3 years of experience with certification schemes, including Common Criteria, FIPS, DoDIN


* Minimum 4 years of experience in a position handling government certifications or security testing.

Preferred Skills:


* Relevant industry certifications such as CISSP, CSSLP, ISSEP


* Ability to work largely unsupervised.


* Some travel (approx.

5-10%) will be required.


* Strong project management skills.


* Knowledge of emerging standards outside of the US, such as EUCC, EUCRA, and ITSAR

Additiona...