Security Certification Engineer - Android, Common Criteria & FIPS 140-3

The role

You will be an individual contributor doing hands-on security engineering. The role certifies Samsung mobile devices and file encryption under US standards Common Criteria (NIAP) and FIPS 140-3.

What you will do

• Perform security engineering on the Android Framework, Linux kernel security, and cryptographic libraries.
• Drive hands-on Common Criteria evaluations against MDFPP, App PP, PKG_TLS, and MOD_VPNC.
• Author and update Security Targets, Key Management Descriptions, Entropy Documentation, and user guidance.
• Draft FIPS 140-3 Security Policies and create JSON test vectors for cryptographic modules.
• Execute NIST CMVP/CAVP certification steps and resolve lab testing issues and CMVP feedback.
• Run vulnerability analysis using Nessus, NMAP, and Wireshark.
• Develop mitigation strategies for vulnerabilities found during security testing.
• Manage certification tasks and remediation in Jira with teams across South Korea, India, Ukraine, the United Kingdom, and the United States.
• Join working sessions across international time zones as product release milestones require.

Required qualifications

• Bachelor's degree in Computer Science or a related engineering discipline, or an equivalent combination of education, training, and experience.
• 3+ years of direct, hands-on engineering experience in Common Criteria and/or FIPS 140-3 certification.
• Strong knowledge of security protocols and their design, such as SSH, IPsec, and TLS.
• Comprehensive understanding of Android Framework architecture, CC specifications, and FIPS 140-3 (ISO/IEC 19790).
• Familiarity with NIST SP 800-series standards, ACVP JSON tooling, and Jira workflow management.
• Working knowledge of the Android Framework, including tracing and debugging security controls across AOSP, BoringSSL/OpenSSL, Keystore, StrongBox/TEE, and SELinux policies.
• Ability to perform source code and protocol level analysis to ensure compliance with specifications.

Nice to have

• A Master's or Ph.D. in Computer Science or Security.

Benefits

• Annual bonus eligibility.
• Generous benefits.

Before you apply

• Samsung's trade secret policy: you must not disclose any trade secrets of a current or previous employer during the application and hiring process.
• Samsung Research America is committed to providing reasonable accommodation for individuals with disabilities during the selection process. Contact the recruiter or sratalent@samsung.com to request on

About the company

Samsung Research America's Mobile Platform Solutions team builds applications and services for Samsung devices, including mobile, wearables, IoT, TVs, and appliances. The team works on AI/ML, security and privacy, and enterprise AI.