The Cryptographic Security Testing (CST) Lab within Accredited Testing and Evaluation (AT&E) at Leidos currently has an opening for a Senior FIPS Security Engineer to work in our Columbia, MD office.
This is an exciting opportunity to use your experience to help with FIPS 140-3 security evaluations. A Senior FIPS Security Engineer is a technical position within the CST, who has significant experience in leading trusted product validations for multiple technology types across all levels of assurance, and in providing consultancy support to CST customers. A Senior FIPS Security Engineer can provide technical support and advice to the CST lab director, CST lab manager, and CST lab technical director, and lead testers, and can represent the CST to CMVP and CST customers.
Requirements:- Minimum Bachelor of Science in Computer Science, Computer Engineering, or related technical discipline, or equivalent experience.
- At least 4 years working at a CST validation laboratory or demonstrate highly advanced knowledge in the subject area.
- CVP certification is not required for this role due to inconsistent availability of testing, however, a Senior FIPS Security Engineer is expected to be capable of passing the CVP exam when available.
- Possess sound knowledge of IT security concepts and familiarity with the CST technical procedures and the validation methodologies employed by the CST.
Responsibilities include:- Advanced FIPS knowledge (Subject Matter Expert)
- Mentor junior testers, as needed
- Coordinate all tasks with the laboratory manager
- Provide weekly project status reports to the laboratory manager to include hours spent, schedule, milestone completion, resource balancing, etc.
- Act as project lead tester, as assigned by the laboratory manager
- Be the client facing technical POC
- Be the POC for receiving vendor equipment and coordinate receiving with the CSTL AT&E Infrastructure Manager
- Coordinate appropriate project status with the project manager, as needed
- Coordinate project status with the CST lab manager prior to any travel plan
- Delegate and supervise all test activities performed by junior testers the laboratory manager assigns
- Manage the hours spent by all testers and supporting staff to ensure the project remains within the budgeted hours provided by the laboratory manager
- Manage project schedule and milestones to ensure that the project remains on schedule
- Manage scope creep and involve the laboratory manager as needed
- Provide expert knowledge of the overall product, time quality, and task performance for junior staff
- Provide weekly formal project status reports to clients to include schedule and milestone completion (frequency and format may change depending on contract terms)
- Check and verify all work performed by junior testers
- Understands and complies with the verification and validation of test methods and procedures
- Analyze results, including statements of conformity and any applicable opinions and interpretations.
- Perform technical quality reviews of final test reports assigned by the CST laboratory manager
- Lead algorithm generation and verification testing activities using the Cryptographic Algorithm Validation System (CAVS) and the Automated Cryptographic Validation Testing System (ACVTS) and be proficient in algorithm submissions
- Lead design reviews
- Lead, review, and finalize compliance analysis
- Lead source code reviews
- Lead failure testing
- Lead operational testing
- Lead testing activities
- Finalize CRYPTIK sections
- Lead physical testing
- Finalize Physical Testing Reports
- Finalize Design Review Form (DRF) and onsite test plans
- Review and generate final reports
Original Posting:September 10, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:Pay Range $107,900.00 - $195,050.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
