SAP Test Engineer

Join C5T Corporation in supporting the Joint Transportation Management System (JTMS), a mission-critical SAP S/4HANA program operating in an IL5 multi-cloud environment.

As a Cyber Test Engineer, you will build the automation that powers ISSO and ISSE security compliance, testing, and continuous monitoring, from STIG and SCAP scanning to CI/CD security gates and SIEM response playbooks.

This position offers the opportunity to strengthen the security posture of a critical defense logistics platform while working with modern DevSecOps, cloud, and compliance tooling., C5T is seeking a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the JTMS IL5 multi-cloud environment.

The successful candidate will automate STIG and SCAP compliance scanning, integrate security testing into GitLab CI/CD pipelines, develop Splunk detection and SOAR playbooks, and automate compliance evidence for RMF continuous monitoring.

The role partners closely with the ISSO and ISSE team and supports a SAFe Agile delivery model.

Key Responsibilities

• Automate STIG and SCAP compliance:

• ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
• SCAP Compliance Checker (SCC) validation of XCCDF, ARF, and CKL results.

• Automation of Trellix Policy Auditor STIG compliance scanning.

• Build testing and quality automation:

• Tricentis test automation for SAP and Mendix regression testing.
• SonarQube quality gates and CI/CD pipeline integration.

• Fortify SAST and software bill of materials (SBOM) generation in CycloneDX and SPDX.

• Develop secure CI/CD pipelines:

• GitLab CI/CD pipeline development and security gate implementation.
• Infrastructure as Code testing for Terraform and CloudFormation.

• Integration of security scanning results into AWS Security Hub.

• Develop SIEM and SOAR capability:

• Splunk ES query development and alert automation.
• Splunk SOAR playbook development with 30 to 90 second automated response targets.

• ESCU (Enterprise Security Content Updates) detection rules.

• Automate compliance evidence:

• eMASS API integration for automated evidence upload.
• AWS Config conformance pack development for continuous compliance.
• AWS Audit Manager control automation.
• CORA evidence pipeline automation.

• Interim Secret clearance at minimum.
• DoD 8140 Foundational and Intermediate qualification for work role 671, System Testing and Evaluation Specialist (tentative), through one of the following: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP.
• Four or more years of experience in security automation, compliance testing, or DevSecOps.
• Experience with ACAS (Tenable SC), Nessus, and SCAP Compliance Checker automation.
• Experience with CI/CD pipelines, security gates, and code quality tools such as GitLab, SonarQube, and Fortify.
• Experience with Splunk ES and SOAR or comparable SIEM and SOAR platforms.
• Experience automating compliance evidence with eMASS and AWS compliance services.

Desired Qualifications

• Python, PowerShell, or Bash scripting.
• AWS GovCloud experience, including Lambda, EventBridge, and Step Functions.
• Understanding of RMF continuous monitoring requirements.
• Experience with SAFe Agile methodology and PI Planning.

C5T Corporation offers a competitive benefits package designed to support employees and their families, including:

• Competitive compensation.
• Medical, dental, and vision insurance options.
• 401(k) retirement plan with company match.
• Flexible Spending Account (FSA).
• Supplemental insurance options, including accident, critical illness, and hospital indemnity coverage.
• Company-paid life insurance.
• Employee Assistance Program (EAP).
• 10 paid holidays annually.
• Responsible Paid Time Off (RPTO), providing flexible vacation and personal leave aligned with mission requirements.
• Opportunities for professional development and career growth.

C5T Corporation is a certified Service-Disabled Veteran-Owned Small Business headquartered at Scott Air Force Base, Illinois. Founded in 2005 by three veterans, C5T delivers mission-focused solutions to the Department of Defense and other government and commercial organizations.