Junior Security Evaluator
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the posting.
We have company description at start: "SGS is the global leader...". That could be "About the role"? Actually "About the role" maybe includes overview of role. The posting includes "Position Overview". That is about the role. So we can put that under About the role
with paragraph(s). Also we have "Key Responsibilities" with sub-sections: FIPS Evaluation Activities, Physical Security Testing, Customer and Project Support, Professional Development. Those are responsibilities. So we can put under Responsibilities
with - items for each bullet? The responsibilities are paragraphs with bullet-like sentences. We can break each bullet into
- . We need to preserve all substantive info.
Then "Qualifications" includes Required Qualifications and Preferred Qualifications. Also Additional Requirements. So we can have
Qualifications
with - for each qualification. Possibly separate required and preferred? Could combine but we need to preserve details. We'll list each bullet.
Also "Skills" maybe not explicit separate; but we could include skills under Qualifications. However we need to include a Skills section only if posting has real specific content for it. There's no separate "Skills" heading; but we could infer skills from qualifications. But rule: include a section ONLY when posting has real, specific content for it. There's no explicit Skills section; but we could still create Skills if we think qualifications cover skills. Safer to not create Skills section if not explicitly present. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It's examples, not mandatory to include all. So we include only those with content.
We have "Additional Information" includes Compensation (Pay) and Benefits. So we need Pay section with salary range. Benefits section with described benefits. Also maybe Schedule? Not present. So we omit Schedule.
Also "Requirements" maybe same as Qualifications? The posting has "Qualifications" and "Additional Requirements". Could treat "Requirements" as a section for required qualifications? But we already have Qualifications. Could also have Requirements separate for required qualifications. But to avoid duplication, we can combine required qualifications under Qualifications. However we need to follow instruction: include a section ONLY when posting has real, specific content for it. There's a "Qualifications" heading in the posting. So we will use that.
We also have "Additional Information" includes Compensation and Benefits. We'll split into Pay and Benefits.
We need to remove boilerplate: EEO, legal, application instructions, etc. Also remove duplicated lines.
We need to preserve all substantive info: company overview? Might be considered "About the role"? The company description is not about the role but about SGS. Could be considered "About the role"? Might be better to put under About the role a brief description of the role (position overview). The company description could be considered background but not required. The instruction: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." The company description is not minor metadata; it's about the company. Should we include it? The posting includes it at start; it's substantive info about the employer. Could be included under About the role? Or maybe we could create an "About the company" section but not in allowed headings. Since only allowed headings are those listed, we could put company description under About the role as a paragraph. That seems okay.
Thus About the role: combine company overview and position overview.
Now Responsibilities: we need to list each bullet.
Let's extract responsibilities:
From "Key Responsibilities":
- FIPS Evaluation Activities
* Assist with the development and execution of FIPS 140-3 test plans in accordance with CMVP requirements.
* Review cryptographic module documentation, including security policies, design documentation, finite state models, and vendor evidence packages.
* Perform hands-on testing of cryptographic modules, including operational testing, physical security testing, and algorithm validation activities.
* Conduct Cryptographic Algorithm Validation Program (CAVP) testing using NIST-approved test methodologies and vectors.
* Document test procedures, test results, observations, and findings in accordance with laboratory quality procedures.
* Support preparation of validation reports and submission packages for CMVP review.
- Physical Security Testing
* Perform physical security assessments of cryptographic modules in accordance with applicable FIPS 140-3 security level requirements.
* Evaluate enclosure construction, tamper evidence mechanisms, tamper response features, and other physical security controls.
* Assist in documenting physical security findings and test results.
- Customer and Project Support
* Serve as a day-to-day technical point of contact for assigned customer projects.
* Coordinate evidence requests, documentation updates, and technical questions with customers.
* Provide project status updates and communicate risks, issues, and schedule impacts to senior staff.
* Track assigned project milestones and deliverables to support successful project completion.
- Professional Development
* Develop working knowledge of FIPS 140-3, the NIST SP 800-140 series, CMVP implementation guidance, and related validation requirements.
* Participate in internal technical training and mentoring activities.
* Continuously build expertise in cryptography, cybersecurity, and security testing methodologies.
Now Qualifications:
Required Qualifications:
- College degree in an IT discipline, or a related technical discipline; or equivalent practical experience.
- Foundational understanding of computer systems and information security principles.
- Basic understanding of cryptographic concepts, including symmetric and asymmetric cryptography, hashing, digital signatures, and key management.
- Strong analytical and problem-solving abilities.
- Excellent written documentation and technical communication skills.
- Strong attention to detail and ability to follow structured test procedures.
- Ability to manage multiple tasks and deadlines in a professional services environment.
- Ability to communicate effectively with customers and technical stakeholders.
Preferred Qualifications:
- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Information Technology, or a related technical discipline; or equivalent practical experience.
- Familiarity with FIPS 140-2, FIPS 140-3, Common Criteria, or other security certification programs.
- Experience with Linux operating systems and command-line tools.
- Experience with Python, Bash, or other scripting languages.
- Exposure to embedded systems, firmware, hardware security modules (HSMs), or secure hardware development.
- Familiarity with cryptographic libraries such as OpenSSL, BoringSSL, wolfSSL, or similar implementations.
- Knowledge of software development, secure coding practices, or vulnerability analysis.
Additional Requirements:
- Ability to obtain any required background checks or security clearances.
- Occasional travel may be required to customer locations.
- Ability to perform hands-on hardware testing activities in a laboratory environment.
Now Pay: Compensation: "The expected salary for this position is $46,000 to $62,000 per year. This range represents the minimum and maximum base salary we reasonably expect to pay for this role. Actual compensation within the range will depend on skills, experience, and qualifications."
Benefits: "Our Benefits We care about your total well-being and will support you with the following, subject to your location and role. Health: Medical, dental and vision insurance, life insurance, employee assistance programs. Wealth: In addition to base pay, we offer 401(k) with company match (immediate vesting upon enrollment). Happiness:Professional Growth: Online training courses, virtual and classroom development experiences, tuition reimbursement programWork-Life Balance: Paid-time off and family leave"
We need to format benefits as list items.
Also there is line: "In compliance with applicable state and local pay transparency laws, we provide clear and equitable compensation information for all applicants." That's part of compensation but we can include as paragraph.
Also "Position anticipated to close November 2, 2026." That's metadata; could be placed as a short paragraph maybe under About the role or separate? It's minor metadata; we could fold into a short
or drop. Probably we can include as a short paragraph under About the role or maybe under Additional Information. Since it's not a heading, we can include as a paragraph.
We must remove boilerplate: EEO, legal, accommodation statement, disability phone number, etc. Also remove "Additional Information" heading? We'll not use that heading; we will split into Pay and Benefits.
Now construct HTML.
We'll start with
About the role
then containing company overview and position overview and maybe closing date.
We need to ensure we don't repeat job title. Not needed.
Now
Responsibilities
then with - for each bullet. Could group by subheadings? Not allowed to add extra headings besides h3. So we just list all responsibilities as list items.
But we might lose grouping; still okay.
Now
Qualifications
then with - for each qualification (required and preferred and additional). Could separate required vs preferred but still list.
Now
Pay
then with salary range and note.
Now
Benefits
then with - for each benefit category.
We need to ensure we don't include empty sections.
Now produce HTML fragment.
Let's craft.
About the role paragraph: combine company overview: "SGS is the global leader and innovator in inspection, verification, testing and certification services. Founded in 1878, SGS is recognized as the global benchmark in quality and integrity. With over 97,000 employees in 130 countries and operating a network of more than 2,400 offices and laboratories, we provide services to almost every industry by assuring quality and safety of products and services. Trusted all over the world, SGS is a market leader because we put 100% passion, pride and innovation into everything we do. We encourage new ideas. We welcome people who challenge the way we do things. And we will be 100% committed to helping you reach your full potential." Then position overview: "SGS-Penumbra is seeking a Junior Security Evaluator to support the testing and validation of cryptographic modules under the FIPS 140-3 Cryptographic Module Validation Program (CMVP). This position is ideal for an early-career technical professional interested in cybersecurity, cryptography, and security compliance. The successful candidate will work alongside experienced evaluators to assess hardware, software, and firmware products against FIPS 140-3 requirements, while developing expertise in NIST standards, cryptographic testing, and security evaluations." Then maybe add closing date: "Position anticipated to close November 2, 2026."
All in one
or multiple
? We can use multiple
under same heading; that's fine.
Now Responsibilities list items: we need to capture each bullet.
Let's list them:
- Assist with the development and execution of FIPS 140-3 test plans in accordance with CMVP requirements.
- Review cryptographic module documentation, including security policies, design documentation, finite state models, and vendor evidence packages.
- Perform hands-on testing of cryptographic modules, including operational testing, physical security testing, and algorithm validation activities.
- Conduct Cryptographic Algorithm Validation Program (CAVP) testing using NIST-approved test methodologies and vectors.
- Document test procedures, test results, observations, and findings in accordance with laboratory quality procedures.
- Support preparation of validation reports and submission packages for CMVP review.
- Perform physical security assessments of cryptographic modules in accordance with applicable FIPS 140-3 security level requirements.
- Evaluate enclosure construction, tamper evidence mechanisms, tamper response features, and
Qualifications
with- for each qualification. Possibly separate required and preferred? Could combine but we need to preserve details. We'll list each bullet.
Also "Skills" maybe not explicit separate; but we could include skills under Qualifications. However we need to include a Skills section only if posting has real specific content for it. There's no separate "Skills" heading; but we could infer skills from qualifications. But rule: include a section ONLY when posting has real, specific content for it. There's no explicit Skills section; but we could still create Skills if we think qualifications cover skills. Safer to not create Skills section if not explicitly present. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It's examples, not mandatory to include all. So we include only those with content. We have "Additional Information" includes Compensation (Pay) and Benefits. So we need Pay section with salary range. Benefits section with described benefits. Also maybe Schedule? Not present. So we omit Schedule. Also "Requirements" maybe same as Qualifications? The posting has "Qualifications" and "Additional Requirements". Could treat "Requirements" as a section for required qualifications? But we already have Qualifications. Could also have Requirements separate for required qualifications. But to avoid duplication, we can combine required qualifications under Qualifications. However we need to follow instruction: include a section ONLY when posting has real, specific content for it. There's a "Qualifications" heading in the posting. So we will use that. We also have "Additional Information" includes Compensation and Benefits. We'll split into Pay and Benefits. We need to remove boilerplate: EEO, legal, application instructions, etc. Also remove duplicated lines. We need to preserve all substantive info: company overview? Might be considered "About the role"? The company description is not about the role but about SGS. Could be considered "About the role"? Might be better to put under About the role a brief description of the role (position overview). The company description could be considered background but not required. The instruction: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." The company description is not minor metadata; it's about the company. Should we include it? The posting includes it at start; it's substantive info about the employer. Could be included under About the role? Or maybe we could create an "About the company" section but not in allowed headings. Since only allowed headings are those listed, we could put company description under About the role as a paragraph. That seems okay. Thus About the role: combine company overview and position overview. Now Responsibilities: we need to list each bullet. Let's extract responsibilities: From "Key Responsibilities": - FIPS Evaluation Activities * Assist with the development and execution of FIPS 140-3 test plans in accordance with CMVP requirements. * Review cryptographic module documentation, including security policies, design documentation, finite state models, and vendor evidence packages. * Perform hands-on testing of cryptographic modules, including operational testing, physical security testing, and algorithm validation activities. * Conduct Cryptographic Algorithm Validation Program (CAVP) testing using NIST-approved test methodologies and vectors. * Document test procedures, test results, observations, and findings in accordance with laboratory quality procedures. * Support preparation of validation reports and submission packages for CMVP review. - Physical Security Testing * Perform physical security assessments of cryptographic modules in accordance with applicable FIPS 140-3 security level requirements. * Evaluate enclosure construction, tamper evidence mechanisms, tamper response features, and other physical security controls. * Assist in documenting physical security findings and test results. - Customer and Project Support * Serve as a day-to-day technical point of contact for assigned customer projects. * Coordinate evidence requests, documentation updates, and technical questions with customers. * Provide project status updates and communicate risks, issues, and schedule impacts to senior staff. * Track assigned project milestones and deliverables to support successful project completion. - Professional Development * Develop working knowledge of FIPS 140-3, the NIST SP 800-140 series, CMVP implementation guidance, and related validation requirements. * Participate in internal technical training and mentoring activities. * Continuously build expertise in cryptography, cybersecurity, and security testing methodologies. Now Qualifications: Required Qualifications: - College degree in an IT discipline, or a related technical discipline; or equivalent practical experience. - Foundational understanding of computer systems and information security principles. - Basic understanding of cryptographic concepts, including symmetric and asymmetric cryptography, hashing, digital signatures, and key management. - Strong analytical and problem-solving abilities. - Excellent written documentation and technical communication skills. - Strong attention to detail and ability to follow structured test procedures. - Ability to manage multiple tasks and deadlines in a professional services environment. - Ability to communicate effectively with customers and technical stakeholders. Preferred Qualifications: - Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Information Technology, or a related technical discipline; or equivalent practical experience. - Familiarity with FIPS 140-2, FIPS 140-3, Common Criteria, or other security certification programs. - Experience with Linux operating systems and command-line tools. - Experience with Python, Bash, or other scripting languages. - Exposure to embedded systems, firmware, hardware security modules (HSMs), or secure hardware development. - Familiarity with cryptographic libraries such as OpenSSL, BoringSSL, wolfSSL, or similar implementations. - Knowledge of software development, secure coding practices, or vulnerability analysis. Additional Requirements: - Ability to obtain any required background checks or security clearances. - Occasional travel may be required to customer locations. - Ability to perform hands-on hardware testing activities in a laboratory environment. Now Pay: Compensation: "The expected salary for this position is $46,000 to $62,000 per year. This range represents the minimum and maximum base salary we reasonably expect to pay for this role. Actual compensation within the range will depend on skills, experience, and qualifications." Benefits: "Our Benefits We care about your total well-being and will support you with the following, subject to your location and role. Health: Medical, dental and vision insurance, life insurance, employee assistance programs. Wealth: In addition to base pay, we offer 401(k) with company match (immediate vesting upon enrollment). Happiness:Professional Growth: Online training courses, virtual and classroom development experiences, tuition reimbursement programWork-Life Balance: Paid-time off and family leave" We need to format benefits as list items. Also there is line: "In compliance with applicable state and local pay transparency laws, we provide clear and equitable compensation information for all applicants." That's part of compensation but we can include as paragraph. Also "Position anticipated to close November 2, 2026." That's metadata; could be placed as a short paragraph maybe under About the role or separate? It's minor metadata; we could fold into a short
or drop. Probably we can include as a short paragraph under About the role or maybe under Additional Information. Since it's not a heading, we can include as a paragraph. We must remove boilerplate: EEO, legal, accommodation statement, disability phone number, etc. Also remove "Additional Information" heading? We'll not use that heading; we will split into Pay and Benefits. Now construct HTML. We'll start with
About the role
thencontaining company overview and position overview and maybe closing date. We need to ensure we don't repeat job title. Not needed. Now
Responsibilities
then- with
- for each bullet. Could group by subheadings? Not allowed to add extra headings besides h3. So we just list all responsibilities as list items.
But we might lose grouping; still okay.
Now
Qualifications
then- with
- for each qualification (required and preferred and additional). Could separate required vs preferred but still list.
Now
Pay
thenwith salary range and note. Now
Benefits
then- with
- for each benefit category.
We need to ensure we don't include empty sections.
Now produce HTML fragment.
Let's craft.
About the role paragraph: combine company overview: "SGS is the global leader and innovator in inspection, verification, testing and certification services. Founded in 1878, SGS is recognized as the global benchmark in quality and integrity. With over 97,000 employees in 130 countries and operating a network of more than 2,400 offices and laboratories, we provide services to almost every industry by assuring quality and safety of products and services. Trusted all over the world, SGS is a market leader because we put 100% passion, pride and innovation into everything we do. We encourage new ideas. We welcome people who challenge the way we do things. And we will be 100% committed to helping you reach your full potential." Then position overview: "SGS-Penumbra is seeking a Junior Security Evaluator to support the testing and validation of cryptographic modules under the FIPS 140-3 Cryptographic Module Validation Program (CMVP). This position is ideal for an early-career technical professional interested in cybersecurity, cryptography, and security compliance. The successful candidate will work alongside experienced evaluators to assess hardware, software, and firmware products against FIPS 140-3 requirements, while developing expertise in NIST standards, cryptographic testing, and security evaluations." Then maybe add closing date: "Position anticipated to close November 2, 2026."
All in one
or multiple
? We can use multiple
under same heading; that's fine. Now Responsibilities list items: we need to capture each bullet. Let's list them: - Assist with the development and execution of FIPS 140-3 test plans in accordance with CMVP requirements. - Review cryptographic module documentation, including security policies, design documentation, finite state models, and vendor evidence packages. - Perform hands-on testing of cryptographic modules, including operational testing, physical security testing, and algorithm validation activities. - Conduct Cryptographic Algorithm Validation Program (CAVP) testing using NIST-approved test methodologies and vectors. - Document test procedures, test results, observations, and findings in accordance with laboratory quality procedures. - Support preparation of validation reports and submission packages for CMVP review. - Perform physical security assessments of cryptographic modules in accordance with applicable FIPS 140-3 security level requirements. - Evaluate enclosure construction, tamper evidence mechanisms, tamper response features, and
- for each benefit category.
We need to ensure we don't include empty sections.
Now produce HTML fragment.
Let's craft.
About the role paragraph: combine company overview: "SGS is the global leader and innovator in inspection, verification, testing and certification services. Founded in 1878, SGS is recognized as the global benchmark in quality and integrity. With over 97,000 employees in 130 countries and operating a network of more than 2,400 offices and laboratories, we provide services to almost every industry by assuring quality and safety of products and services. Trusted all over the world, SGS is a market leader because we put 100% passion, pride and innovation into everything we do. We encourage new ideas. We welcome people who challenge the way we do things. And we will be 100% committed to helping you reach your full potential." Then position overview: "SGS-Penumbra is seeking a Junior Security Evaluator to support the testing and validation of cryptographic modules under the FIPS 140-3 Cryptographic Module Validation Program (CMVP). This position is ideal for an early-career technical professional interested in cybersecurity, cryptography, and security compliance. The successful candidate will work alongside experienced evaluators to assess hardware, software, and firmware products against FIPS 140-3 requirements, while developing expertise in NIST standards, cryptographic testing, and security evaluations." Then maybe add closing date: "Position anticipated to close November 2, 2026."
All in one
- for each qualification (required and preferred and additional). Could separate required vs preferred but still list.
Now
- for each bullet. Could group by subheadings? Not allowed to add extra headings besides h3. So we just list all responsibilities as list items.
But we might lose grouping; still okay.
Now