December 27, 2024

Post Quantum Cryptography Analyst, Public Sector

Mid • Hybrid • On-site • Remote

$130,000 - $193,000/yr

Virginia, VA


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  • 10 years of experience in cryptography, cybersecurity, mathematics, or quantum computing.
  • Experience with cryptography concepts like symmetric or asymmetric encryption, digital signatures, protocols, libraries, and common algorithms (e.g., RSA, AES, ECC).
  • Experience with Quantum Computing Principles like quantum mechanics, superposition, entanglement, and quantum algorithms.

Preferred qualifications:

  • Experience in areas like linear algebra, number theory, and abstract algebra.
  • Experience with common security protocols and standards and how they may be affected by quantum computing.
  • Experience with Python, C++, Java, etc. and cryptographic libraries.
  • Knowledge of PQC algorithms, standards, and best practices, including evaluating the security or performance of algorithms and identifying vulnerabilities.
  • Knowledge of cryptographic systems for vulnerabilities and attack vectors including security proofs, cryptanalysis techniques, and side-channel attacks.
  • Ability to analyze technical problems, develop effective solutions, and communicate technical information to both technical and non-technical audiences.

About the job

Post Quantum Cryptography (PQC) technology has been identified as a new cyber threat. To mitigate such threats, a Post-Quantum Cryptography (PQC) analyst is being sought for a role that specializes in protecting information and systems from the potential threats posed by quantum computers.

In this role, you will assist in the discovery process by identifying tools for conducting an enterprise inventory. You will correlate access to external datasets that are more exposed and at higher risk. You will prioritize high-risk software or hardware and report as needed.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

The US base salary range for this full-time position is $130,000-$193,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

  • Identify existing tools for conducting an enterprise inventory and correlate access to outside datasets.
  • Capture inventory of critical data to inform future analysis by identifying what data/systems are at risk and decrypted once a cryptographically quantum computer is available, identify where and for what purpose public key cryptography is being used and mark those systems as quantum vulnerable, and develop a replacement report of which systems and devices should be prioritized for replacement.
  • Manage the systems and devices using cryptographic technologies for any function to facilitate a smooth transition in the future, prioritizing high risk software and hardware in a PQC Inventory Report.
  • Develop Internal PQC standards, public key cryptography, and an Inventory of cryptographic technologies reports.
  • Identify and update acquisition, cybersecurity, and data security standards to reflect post quantum requirements.