Job Description

Riverside Overview

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems. All Riverside Research opportunities require U.S. Citizenship.

Position Overview

Designs, implements and maintains quality assurance protocols and methods for processing materials into partially finished or finished products. Responsible for planning, implementing and managing compliance of manufacturing and production processes with internal and external safety, quality and regulatory standards requirements for worldwide distribution. Designs methods and procedures for inspecting, testing and evaluating the precision and accuracy of production processes, production equipment and finished products. Performs analysis of reports and production data to identify trends and recommend updates or changes to quality standards and procedures when necessary. May assure compliance to in-house and/or external specifications and standards (i.e. GLP, GMP, ISO, Six Sigma).

Riverside Research is seeking a Senior NIAP Evaluation and Test Readiness Engineer to support the evaluation and certification readiness of secure communications products for national security customers.

This role will focus on assessing product compliance with applicable NIAP Protection Profile (PP-RD) requirements, identifying technical and documentation gaps, developing evaluation evidence, and preparing engineering teams for a formal Test Readiness Review (TRR).

The ideal candidate will have practical experience with NIAP Common Criteria evaluations, security requirements analysis, compliance assessments, and verification and validation activities.

This is a part-time role.

Responsibilities

Understands and works on complex issues where analysis of situations or data requires an in-depth evaluation of variable factors. Determines methods and procedures on new assignments. Exercises judgment in selecting methods, evaluating, adapting of complex techniques and evaluation criteria for obtaining results. Work is reviewed upon completion and is consistent with departmental objectives. Networks with key contacts outside own area of expertise. Adapts style and uses persuasion in delivering messages that relate to the wider firm business. Frequently advises others on complex matters. May be accountable through team for delivery of tactical business targets.

Performs the following duties:

• Evaluate product architectures, implementations, and technical documentation against applicable NIAP Protection Profile requirements and associated evaluation activities.
• Develop and maintain compliance matrices mapping Security Functional Requirements (SFRs) and Security Assurance Requirements (SARs) to product capabilities, evaluation evidence, and test procedures.
• Conduct gap assessments and work with engineering teams to identify and resolve compliance deficiencies.
• Develop and review evaluation artifacts, including Security Targets, technical documentation, test procedures, and supporting evidence.
• Prepare Test Readiness Review packages, including test plans, requirements traceability, compliance status, identified risks, and readiness recommendations.
• Coordinate with engineering teams, government stakeholders, and evaluation laboratories to address technical findings and support evaluation readiness.
• Track evaluation progress, document deficiencies, and recommend corrective actions to achieve test readiness.

Qualifications

A minimum of 8 years of related experience with a Bachelor's degree, 6 years with a Master's degree, a PhD with 3 years experience, or equivalent experience is typically required for an employee at this level.

Required:

• Minimum of 8 years of experience in cybersecurity engineering, security evaluation, systems engineering, or verification and validation.
• Knowledge of NIAP Common Criteria Protection Profiles, Security Functional Requirements (SFRs), Security Assurance Requirements (SARs), and evaluation activities.
• Experience conducting requirements analysis, compliance assessments, gap analyses, or security verification activities.
• Experience developing or reviewing technical documentation, test plans, compliance matrices, and evaluation evidence.
• Ability to work directly with engineering teams to interpret security requirements and identify compliance gaps.
• Strong technical writing, analytical, and communication skills.
• US. citizenship.
• Ability to obtain and maintain a Secret security clearance.

Desired:

• Direct experience supporting a NIAP Common Criteria product evaluation or working with a Common Criteria Testing Laboratory (CCTL).
• Experience preparing for or participating in formal Test Readiness Reviews.
• Experience developing Security Targets and defining Target of Evaluation (TOE) boundaries.
• Familiarity with NIAP Protection Profiles for network devices, secure communications products, or related security technologies.
• Knowledge of cryptographic systems, embedded Linux, network security, and secure communications architectures.
• Familiarity with FIPS 140-3, NSA Commercial Solutions for Classified (CSfC), or other government security certification processes.
• Current Secret clearance

Global Comp

$140,000 - $175,000 This represents the typical compensation range for this position based on experience, location and other factors.

Closing Statement

Riverside Research Institute is a not-for-profit, technology-oriented defense company, where service to our customers and support of our staff is our overall mission. Riverside is an affirmative action-equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. Riverside offers comprehensive compensation and benefit packages to our employees. Riverside bases its employment decisions solely on technical experience, qualifications and other job-related criteria related to our organizational purpose as a not-for-profit company, and without regard to race, color, religion, age, sex marital status, sexual orientation, national origin, physical or mental disability, veteran’s status or any other status legally protected by applicable federal, state, and local law.