Cyber Test Engineer

Gridiron IT is looking for a Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous?monitoring automation for an IL5 multi?cloud environment.

Clearance: Interim Secret (minimum) Certification Requirements: DoD 8140 - Foundational Intermediate - 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP Experience: 4+ years in security automation, compliance testing, or DevSecOps

Technical Requirements:

STIG / SCAP Automation Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools Proficiency with Tricentis test automation (SAP + Mendix regression testing) Experience with SonarQube quality gates and CI/CD pipeline integration Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline GitLab CI/CD pipeline development and security?gate implementation IaC testing (Terraform / CloudFormation validation) Integration of security?scanning results into AWS Security Hub

SIEM / SOAR Splunk ES query development and alert automation Splunk SOAR playbook development (30-90 second automated response targets) Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation eMASS API integration for automated evidence upload AWS Config conformance?pack development for continuous compliance AWS Audit Manager control automation CORA evidence?pipeline automation

Preferred Skills Python, PowerShell, or Bash scripting AWS GovCloud experience (Lambda, EventBridge, Step Functions) Understanding of RMF continuous?monitoring requirements Experience with SAFe Agile methodology and PI planning Clearance

Salary Range $100,000 - $155,000YR (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)

Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.

Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.

Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients’ missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT’s experienced workforce and our commitment to ensuring we meet and exceed our clients’ expectations.