> Markdown version of [/jobs/ext/3994775-cyber-test-engineer](https://www.wearedevelopers.com/jobs/ext/3994775-cyber-test-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Test Engineer

- **Company:** CSCI Consulting
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Comptia Cloud+, Application Programming Interfaces (APIs), Amazon Web Services, Automation of Tests, Bash Shell, CompTIA Security+, Data Governance, Python (Programming Language), Microsoft Security Essentials, Windows PowerShell, Regression Testing, Comptia Pentest+ CE, Mendix, SAP (Applications), Scaled Agile Framework, Security Content Automation Protocol, Security Software, SonarQube, System Testing, Systems Integration, Cloudformation, Gitlab-ci, Nessus, Opsworks, Terraform, Splunk, Scap Compliance Checker, Devsecops, Api Management, Security Orchestration, Automation & Response, Static Application Security Testing
- **Published:** October 28, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9271173/cyber-test-engineer

## About the Role

* U.S. citizenship
 * Must be able to obtain a Federal Secret security clearance (Active clearance preferred)
 * At least four years of experience in security automation, compliance testing, DevSecOps, or related discipline
 * Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role
 * Possession of an applicable cybersecurity certification, such as:
 + Certified Ethical Hacker
 + CyberSec First Responder
 + CompTIA Cloud+
 + GIAC Security Essentials
 + CompTIA PenTest+
 + CompTIA Security+
 + Systems Security Certified Practioner
 * Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor
 * Experience with Tricentis test automation supporting SAP or Mendix regression testing
 * Experience integrating SonarQube quality gates or fortify static application security testing with CI/CD pipelines
 * Experience generating software bills of materials using CycloneDX or SPDX
 * Experience developing GitLab CI/CD pipelines and implementing automated security gates
 * Experience testing or validating Infrastructure as Code using Terraform or AWS CloudFormation.
 * Experience integrating security-scanning results into AWS Security Hub.
 * Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.
 * Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities.
 * Creativity and adaptability in problem-solving
 * Ability to work with clients to understand their needs
 * Strong organizational and time-management skills
 * Excellent written and verbal communication skills
 * Professional presence

Preferred Skills

 * Proficiency with Python, PowerShell, or Bash scripting
 * Experience working within AWS GovCloud
 * Experience with AWS Lambda, Amazon EventBridge, or AWS Step Functions
 * Understanding of Risk Management Framework continuous monitoring requirements
 * Experience working in a Scaled Agile Framework environment
 * Experience participating in Program Increment planning
 * Strong analytical, troubleshooting, and technical communication skills
 * Ability to work independently and collaborate effectively with cybersecurity, engineering, compliance, and development teams
 * Ability to work in a team environment, as well as independently
 * Strong customer and vendor relationship skills
 * Demonstrated ability to comply with data standards and policies
 * Motivation to learn new technologies and methodologies that demonstrate value
 * Past experience working with a Federal government agency
 * Department of War experience is a plus!

## Description

* Develop and maintain automated security compliance, testing, and continuous monitoring capabilities
 * Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning
 * Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus
 * Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files
 * Automate Trellix Policy Auditor scanning for STIG compliance
 * Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing
 * Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines
 * Support software bill of materials generation using CycloneDX and SPDX standards
 * Develop GitLab CI/CD pipelines and implement automated security gates
 * Validate Infrastructure as Code developed using Terraform and AWS CloudFormation
 * Integrate security-scanning results into AWS Security Hub
 * Develop Splunk Enterprise Security queries and automate security alerts
 * Develop Splunk SOAR playbooks that support automated incident response
 * Implement Enterprise Security Content Updates detection rules
 * Integrate with the eMASS API to automate compliance-evidence uploads
 * Develop AWS Config conformance packs to support continuous compliance
 * Automate security controls using AWS Audit Manager
 * Support Continuous Operational Readiness Assessment evidence-pipeline automation