Cyber Test Engineer

CSCI Consulting is looking for a Cyber Test Engineer to support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment. Demonstrate the ability to successfully deliver a complex, mission-critical project requiring coordination across multiple stakeholders, systems, and interdependent requirements.

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities
• Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning
• Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable Security Center, and Nessus
• Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files
• Automate Trellix Policy Auditor scanning for STIG compliance
• Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing
• Integrate Sonar Qube quality gates and fortify static application security testing into CI/CD pipelines
• Support software bill of materials generation using CycloneDX and SPDX standards
• Develop Git Lab CI/CD pipelines and implement automated security gates
• Validate Infrastructure as Code developed using Terraform and AWS Cloud Formation
• Integrate security-scanning results into AWS Security Hub
• Develop Splunk Enterprise Security queries and automate security alerts
• Develop Splunk SOAR playbooks that support automated incident response
• Implement Enterprise Security Content Updates detection rules
• Integrate with the eMASS API to automate compliance-evidence uploads
• Develop AWS Config conformance packs to support continuous compliance
• Automate security controls using AWS Audit Manager
• Support Continuous Operational Readiness Assessment evidence-pipeline automation

• U.S. citizenship
• Must be able to obtain a Federal Secret security clearance (Active clearance preferred)
• At least four years of experience in security automation, compliance testing, Dev Sec Ops , or related discipline
• Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role
• Possession of an applicable cybersecurity certification, such as:
  • Certified Ethical Hacker
  • Cyber Sec First Responder
  • CompTIA Cloud+
  • GIAC Security Essentials
  • CompTIA Pen Test+
  • CompTIA Security+
  • Systems Security Certified Practioner
• Experience with ACAS, Tenable Security Center, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor
• Experience with Tricentis test automation supporting SAP or Mendix regression testing
• Experience integrating Sonar Qube quality gates or fortify static application security testing with CI/CD pipelines
• Experience generating software bills of materials using CycloneDX or SPDX
• Experience developing Git Lab CI/CD pipelines and implementing automated security gates
• Experience testing or validating Infrastructure as Code using Terraform or AWS Cloud Formation.
• Experience integrating security-scanning results into AWS Security Hub.
• Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.
• Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities.
• Creativity and adaptability in problem-solving
• Ability to work with clients to understand their needs
• Strong organizational and time-management skills
• Excellent written and verbal communication skills
• Professional presence

• Proficiency with Python, Power Shell, or Bash scripting
• Experience working within AWS Gov Cloud
• Experience with AWS Lambda, Amazon Event Bridge, or AWS Step Functions
• Understanding of Risk Management…