Cyber Test Engineer

Job Description

CSCI Consulting is looking for a Cyber Test Engineer to support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment.  Demonstrate the ability to successfully deliver a complex, mission-critical project requiring coordination across multiple stakeholders, systems, and interdependent requirements.

Responsibilities

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities
• Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning
• Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus
• Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files
• Automate Trellix Policy Auditor scanning for STIG compliance
• Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing
• Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines
• Support software bill of materials generation using CycloneDX and SPDX standards
• Develop GitLab CI/CD pipelines and implement automated security gates
• Validate Infrastructure as Code developed using Terraform and AWS CloudFormation
• Integrate security-scanning results into AWS Security Hub
• Develop Splunk Enterprise Security queries and automate security alerts
• Develop Splunk SOAR playbooks that support automated incident response
• Implement Enterprise Security Content Updates detection rules
• Integrate with the eMASS API to automate compliance-evidence uploads
• Develop AWS Config conformance packs to support continuous compliance
• Automate security controls using AWS Audit Manager
• Support Continuous Operational Readiness Assessment evidence-pipeline automation

Minimum Requirements

• U.S. citizenship
• Must be able to obtain a Federal Secret security clearance (Active clearance preferred)
• At least four years of experience in security automation, compliance testing, DevSecOps, or related discipline
• Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role
• Possession of an applicable cybersecurity certification, such as:
  • Certified Ethical Hacker
  • CyberSec First Responder
  • CompTIA Cloud+
  • GIAC Security Essentials
  • CompTIA PenTest+
  • CompTIA Security+
  • Systems Security Certified Practioner
• Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor
• Experience with Tricentis test automation supporting SAP or Mendix regression testing
• Experience integrating SonarQube quality gates or fortify static application security testing with CI/CD pipelines
• Experience generating software bills of materials using CycloneDX or SPDX
• Experience developing GitLab CI/CD pipelines and implementing automated security gates
• Experience testing or validating Infrastructure as Code using Terraform or AWS CloudFormation.
• Experience integrating security-scanning results into AWS Security Hub.
• Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.
• Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities.
• Creativity and adaptability in problem-solving
• Ability to work with clients to understand their needs
• Strong organizational and time-management skills
• Excellent written and verbal communication skills
• Professional presence

Preferred Skills

• Proficiency with Python, PowerShell, or Bash scripting
• Experience working within AWS GovCloud
• Experience with AWS Lambda, Amazon EventBridge, or AWS Step Functions
• Understanding of Risk Management Framework continuous monitoring requirements
• Experience working in a Scaled Agile Framework environment
• Experience participating in Program Increment planning
• Strong analytical, troubleshooting, and technical communication skills
• Ability to work independently and collaborate effectively with cybersecurity, engineering, compliance, and development teams
• Ability to work in a team environment, as well as independently
• Strong customer and vendor relationship skills
• Demonstrated ability to comply with data standards and policies
• Motivation to learn new technologies and methodologies that demonstrate value
• Past experience working with a Federal government agency
• Department of War experience is a plus!