Cyber Test Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist the Information System Security Officer and Information System Security Engineer with security compliance, automated testing, and continuous monitoring tasks within a Level 5 multi-cloud environment.

• Create and sustain automated security compliance, testing, and continuous monitoring functions.

• Automate DISA STIG and SCAP benchmark scans.

• Conduct ongoing DISA SCAP benchmark scans utilizing ACAS, Tenable SecurityCenter, and Nessus.

• Employ the SCAP Compliance Checker to verify XCCDF, ARF, and CKL files.

• Automate Trellix Policy Auditor scans for STIG compliance.

• Design and manage Tricentis test automation for SAP and Mendix regression testing.

• Integrate SonarQube quality gates and Fortify static application security testing into CI/CD pipelines.

• Assist in generating software bills of materials adhering to CycloneDX and SPDX standards.

• Create GitLab CI/CD pipelines and implement automated security gates.

• Validate Infrastructure as Code using Terraform and AWS CloudFormation.

• Incorporate security scanning results into AWS Security Hub.

• Develop Splunk Enterprise Security queries and automate security alerts.

• Create Splunk SOAR playbooks to facilitate automated incident response.

• Implement detection rules for Enterprise Security Content Updates.

• Automate compliance-evidence uploads via the eMASS API.

• Generate AWS Config conformance packs for ongoing compliance.

• Automate security controls utilizing AWS Audit Manager.

• Support the automation of Continuous Operational Readiness Assessment evidence pipelines.

• Coordinate the delivery of complex, mission-critical tasks among stakeholders, systems, and interdependent requirements.

⛳️ Requirements

• U.S. citizenship is required.

• Must be eligible to obtain a Federal Secret security clearance (Active clearance is preferred).

• Minimum of four years of experience in security automation, compliance testing, DevSecOps, or a related field.

• Capability to satisfy applicable DoD 8140 qualification criteria for the System Testing and Evaluation Specialist role.

• Possession of a relevant cybersecurity certification, such as Certified Ethical Hacker, CyberSec First Responder, CompTIA Cloud+, GIAC Security Essentials, CompTIA PenTest+, CompTIA Security+, or Systems Security Certified Practitioner.

• Familiarity with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor.

• Experience with Tricentis test automation that supports SAP or Mendix regression testing.

• Experience in integrating SonarQube quality gates or Fortify static application security testing within CI/CD pipelines.

• Background in generating software bills of materials using CycloneDX or SPDX.

• Experience in developing GitLab CI/CD pipelines and implementing automated security gates.

• Experience in testing or validating Infrastructure as Code with Terraform or AWS CloudFormation.

• Experience in integrating security scanning results into AWS Security Hub.

• Proficiency in developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.

• Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or similar compliance-automation tools.

• Demonstrated creativity and adaptability in problem-solving.

• Ability to collaborate with clients to understand their requirements.

• Strong organizational and time-management abilities.

• Excellent written and verbal communication skills.

• Professional demeanor.

• Preferred: expertise in Python, PowerShell, or Bash scripting; AWS GovCloud; AWS Lambda, Amazon EventBridge, or AWS Step Functions; Risk Management Framework continuous monitoring; Scaled Agile Framework; Program Increment planning; experience with federal government agencies; experience with the Department of War.

🏝️ Benefits

• Competitive salary packages.

• Generous Paid Time Off (PTO) offerings.

• Paid holidays that align with the Federal calendar.

• Comprehensive health benefits including medical, dental, vision, and life insurance.

• 401(k) retirement savings plan.

• Team-building activities.

• Support for professional development.