Common Criteria Security Engineer

Zachary Piper Solutions is seeking a Common Criteria Security Engineer to join a leading cybersecurity and technology organization focused on delivering secure, certifiable products for global markets. The role involves aligning product security initiatives with European certification standards and collaborating closely with engineering, security, and product teams to support certification efforts.

Responsibilities:

• Partner with software and systems engineering teams to incorporate Common Criteria requirements into product design and development activities
• Drive certification initiatives by assisting with Security Target creation, gathering evaluation evidence, and coordinating documentation efforts
• Assess product architectures, security controls, and technical deliverables to ensure preparedness for certification reviews
• Conduct security-focused activities including threat modeling, architecture assessments, and vulnerability analysis
• Work directly with evaluation laboratories, product stakeholders, and security teams to address findings and maintain certification status

Requirements:

• Bachelor's degree in computer science, Cybersecurity, Engineering, Information Technology, or a related discipline
• Minimum of 3 years of experience in product security, systems engineering, software engineering, or a related technical security role
• Knowledge of secure software development practices, system security architecture, and risk-based design principles
• Hands-on experience in one or more areas including IAM, operating systems, cloud security, network security, cryptography, or embedded technologies
• Familiarity with Common Criteria (ISO/IEC 15408) evaluations and associated certification processes
• Understanding of Security Targets (STs), Protection Profiles (PPs), Evaluation Assurance Levels (EALs), and emerging EUCC requirements
• Experience supporting products within government, defense, critical infrastructure, or other highly regulated industries
• Industry certifications such as CISSP, Security+, CCSP, or similar security credentials
• Experience collaborating with accredited testing laboratories and external regulatory stakeholders