Established in 1997, Softeq was built from the ground up to specialize in new product development and R&D, tackling the most difficult problems in the tech sphere. Now we've expanded to offer early-stage innovation and ideation plus digital transformation business consulting. Our superpower is to deliver all of this under one roof on a global scale. So let's get started and build a better future together!
Softeq is looking for a senior specialist to assess the FIPS-readiness of an embedded storage / SSD product and define the required remediation path.
Key focus areas:
- Assess the current storage product architecture from a FIPS 140-3 readiness perspective;
- Review cryptographic module boundaries, secure boot, key handling, RNG/entropy, and firmware security assumptions;
- Identify certification blockers and architectural gaps;
- Evaluate whether the current hardware platform is sufficient, or whether additional security hardware (for example, a secure element or dedicated security chip) is required;
- Review third-party hardware / firmware components and highlight certification risks;
- Provide practical recommendations for remediation priorities and certification feasibility.
Required experience:
- Hands-on experience with FIPS 140-2 / 140-3 readiness, validation support, or certification-oriented security work specifically for storage, SSD, or other embedded storage devices;
- Strong understanding of storage device security architecture;
- Experience with cryptographic module boundary definition in embedded storage products;
- Familiarity with secure boot, firmware signing, key management, and entropy / RNG considerations;
- Ability to perform technical gap assessment on incomplete or partially documented hardware / firmware systems.
Softeq communicates only from @softeq.com email addresses. We never request payments or fees for any reason during hiring — including trainings or courses to be completed, equipment, onboarding, or background checks — and we will not ask for cryptocurrency or gift cards. If you receive a message from any other domain or requesting payment, do not respond and report it to [email protected]