Post Quantum Cryptography Analyst, Public Sector

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 10 years of experience in cryptography, cybersecurity, mathematics, or quantum computing.
• Experience with cryptography concepts like symmetric or asymmetric encryption, digital signatures, protocols, libraries, and common algorithms (e.g., RSA, AES, ECC).
• Experience with Quantum Computing Principles like quantum mechanics, superposition, entanglement, and quantum algorithms.

Preferred qualifications:

• Experience in areas like linear algebra, number theory, and abstract algebra.
• Experience with common security protocols and standards and how they may be affected by quantum computing.
• Experience with Python, C++, Java, etc. and cryptographic libraries.
• Knowledge of PQC algorithms, standards, and best practices, including evaluating the security or performance of algorithms and identifying vulnerabilities.
• Knowledge of cryptographic systems for vulnerabilities and attack vectors including security proofs, cryptanalysis techniques, and side-channel attacks.
• Ability to analyze technical problems, develop effective solutions, and communicate technical information to both technical and non-technical audiences.

Post Quantum Cryptography (PQC) technology has been identified as a new cyber threat. To mitigate such threats, a Post-Quantum Cryptography (PQC) analyst is being sought for a role that specializes in protecting information and systems from the potential threats posed by quantum computers.

In this role, you will assist in the discovery process by identifying tools for conducting an enterprise inventory. You will correlate access to external datasets that are more exposed and at higher risk. You will prioritize high-risk software or hardware and report as needed.

• Identify existing tools for conducting an enterprise inventory and correlate access to outside datasets.
• Capture inventory of critical data to inform future analysis by identifying what data/systems are at risk and decrypted once a cryptographically quantum computer is available, identify where and for what purpose public key cryptography is being used and mark those systems as quantum vulnerable, and develop a replacement report of which systems and devices should be prioritized for replacement.
• Manage the systems and devices using cryptographic technologies for any function to facilitate a smooth transition in the future, prioritizing high risk software and hardware in a PQC Inventory Report.
• Develop Internal PQC standards, public key cryptography, and an Inventory of cryptographic technologies reports.
• Identify and update acquisition, cybersecurity, and data security standards to reflect post quantum requirements.