FIPS 140-3 Security Tester

In compliance with applicable pay transparency requirements, the application window for this position is expected to close on October 21, 2026, subject to change based on business need.

A Day in the Life and the Impact You'll Make:

We are seeking a highly motivated and experienced FIPS 140-3 Security Tester. In this role, you will lead FIPS 140-3 evaluations and serve as a subject matter expert in Entropy Source Validation (ESV). You will combine practical testing, technical analysis and clear communication to help customers navigate cryptographic validation requirements, while strengthening our team's expertise.

What You'll Do:

• Delivering FIPS 140-3 evaluations, including documentation and source code reviews, test planning and execution, preparation of laboratory reports, and resolution of CMVP review comments.
• Leading entropy source assessments against NIST SP 800-90B, evaluating noise source designs, entropy claims, heuristic analyses and supporting technical evidence.
• Planning and reviewing raw noise data collection, performing IID and non-IID entropy assessments, analyzing restart test results, and interpreting outputs from NIST's entropy assessment tools.
• Assessing conditioning components, health tests-including Repetition Count and Adaptive Proportion Tests-and the detection and handling of entropy source failures.
• Preparing and reviewing ESV submission packages, coordinating submissions and addressing technical questions throughout the validation process.
• Explaining evaluation requirements and findings to customers, identifying evidence gaps and coordinating the work needed to resolve them.
• Mentoring colleagues and improving testing methods, technical documentation and automation across our global team.

What You'll Bring:

• A degree in Computer Science, Mathematics, Telecommunications, Cybersecurity, Physics, Electrical/Electronic Engineering or a related discipline.
• Proven experience in FIPS 140-3 evaluations and practical ownership of ESV projects, including submission preparation and resolution of reviewer comments.
• Deep knowledge of NIST SP 800-90B, supported by strong foundations in probability, statistics, min-entropy estimation and random number generation.
• Working knowledge of ISO/IEC 19790, ISO/IEC 24759, the NIST SP 800-140 series and applicable CMVP Implementation Guidance.
• A solid understanding of cryptographic implementations, key management, self-tests and SP 800-90A deterministic random bit generators.
• Programming and scripting skills for source code analysis, data processing and test automation, particularly in C/C++ and Python.
• Strong technical writing skills and the ability to explain complex findings clearly to customers and colleagues.
• The ability to work independently, exercise sound technical judgment and collaborate across an international team.
• The ability to approach problems systematically, investigate technical details and explain your reasoning.
• Attention to detail, a collaborative attitude and a willingness to learn from feedback.

Physical Considerations:

• Must be able to withstand the rigors of travel.
• May require difficult travel and long periods of driving.
• Ability to move and conduct work with full range of motion.
• Ability to lift 25-50lbs (luggage).
• Extended periods of computer-based work.
• Extended periods of standing.

Travel Considerations:

• Domestic travel; estimated 25%

What You'll Receive for the Value You Bring:

Compensation:

DEKRA North America's compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $76,100 annually in our lowest geographic market up to $111,000 annually in our highest geographic market. Actual pay is based on several factors including market location and position-related knowledge, skills, and experience.

Benefits:

DEKRA North America strives to provide a competitive benefits package to colleagues and promotes physical, emotional, and financial well-being. Colleagues can self-select from our benefits to create a package unique to their needs. These benefits include access to competitive health care and retirement benefits, paid time off, mental health well-being resources, and opportunities to learn and develop. Below is a list of benefits we offer our colleagues:

Health & Well-being Benefits:

• Health care benefits: medical & prescription, dental, vision (including Domestic Partners)
• Critical Illness & Hospital Indemnity supplemental insurance
• Company Health Savings Account contribution
• Flexible Spending Account for eligible health care and dependent care expenses
• Paid time off such as vacation, sick leave, and floating holidays
• Mental and emotional support resources through our Employee Assistance Program
• Wellness Program to increase activity and health habits, with ability to earn participation rewards
• Paid Parental Leave
• Travel Assist (Domestic/International)

Financial Benefits:

• 401(k) plan, with an employer match
• Company paid Short- & Long-Term Disability benefits
• Group term life insurance with options to buy-up for self and others
• Working Advantage - DEKRA's official corporate discount program

Growth and Development Benefits:

• Education Assistance Program
• Student Loan Repayment Assistance
• Internal training and development resources to grow your career
• LEAD Forward Leadership Development Program
• Annual Career Goal Setting and Performance Review cycle participation

This list provides an overview of benefits provided for US-based colleagues; the DEKRA North America Employee Benefits Guide outlines plan details and further related eligibility requirements.

Additional Position Details:

• Reports to: Managing Director
• Work Model: Remote
• Work Location: Remote
• Supervises Others: No
• Status: Full-time, Regular
• FLSA Classification: Exempt
• Visa Sponsorship Eligibility: This position is not eligible for Visa Sponsorship.
• Relocation Eligibility: This position is not eligible for relocation.