> Markdown version of [/jobs/ext/3995496-sap-test-engineer](https://www.wearedevelopers.com/jobs/ext/3995496-sap-test-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP Test Engineer

- **Company:** C5T Corporation
- **Location:** Scott Air Force Base, IL, United States
- **Experience:** Experienced
- **Contract:** Contract
- **Skills:** Amazon Web Services, Automation of Tests, Bash Shell, Software Quality, Continuous Integration, Python (Programming Language), Windows PowerShell, Regression Testing, Comptia Pentest+ CE, Fortify (Software), Mendix, SAP (Applications), Security Content Automation Protocol, Security Information and Event Management, SonarQube, System Testing, Multi-Cloud, Gitlab, Cloudformation, Gitlab-ci, SAP S/4HANA, Nessus, Opsworks, Terraform, Splunk, Scap Compliance Checker, Data Pipelines, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Vulnerability Analysis
- **Published:** October 28, 2026
- **Apply:** https://www.thejobnetwork.com/job/39e07ec9-ad74-4d11-8a45-166b6fc4647b/sap-test-engineer

## About the Role

* Interim Secret clearance at minimum.
 * DoD 8140 Foundational and Intermediate qualification for work role 671, System Testing and Evaluation Specialist (tentative), through one of the following: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP.
 * Four or more years of experience in security automation, compliance testing, or DevSecOps.
 * Experience with ACAS (Tenable SC), Nessus, and SCAP Compliance Checker automation.
 * Experience with CI/CD pipelines, security gates, and code quality tools such as GitLab, SonarQube, and Fortify.
 * Experience with Splunk ES and SOAR or comparable SIEM and SOAR platforms.
 * Experience automating compliance evidence with eMASS and AWS compliance services.

Desired Qualifications

 * Python, PowerShell, or Bash scripting.
 * AWS GovCloud experience, including Lambda, EventBridge, and Step Functions.
 * Understanding of RMF continuous monitoring requirements.
 * Experience with SAFe Agile methodology and PI Planning.

## Description

Join C5T Corporation in supporting the Joint Transportation Management System (JTMS), a mission-critical SAP S/4HANA program operating in an IL5 multi-cloud environment.

As a Cyber Test Engineer, you will build the automation that powers ISSO and ISSE security compliance, testing, and continuous monitoring, from STIG and SCAP scanning to CI/CD security gates and SIEM response playbooks.

This position offers the opportunity to strengthen the security posture of a critical defense logistics platform while working with modern DevSecOps, cloud, and compliance tooling., C5T is seeking a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the JTMS IL5 multi-cloud environment.

The successful candidate will automate STIG and SCAP compliance scanning, integrate security testing into GitLab CI/CD pipelines, develop Splunk detection and SOAR playbooks, and automate compliance evidence for RMF continuous monitoring.

The role partners closely with the ISSO and ISSE team and supports a SAFe Agile delivery model.

Key Responsibilities

 * Automate STIG and SCAP compliance:

 * ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
 * SCAP Compliance Checker (SCC) validation of XCCDF, ARF, and CKL results.
 * Automation of Trellix Policy Auditor STIG compliance scanning.

 * Build testing and quality automation:

 * Tricentis test automation for SAP and Mendix regression testing.
 * SonarQube quality gates and CI/CD pipeline integration.
 * Fortify SAST and software bill of materials (SBOM) generation in CycloneDX and SPDX.

 * Develop secure CI/CD pipelines:

 * GitLab CI/CD pipeline development and security gate implementation.
 * Infrastructure as Code testing for Terraform and CloudFormation.
 * Integration of security scanning results into AWS Security Hub.

 * Develop SIEM and SOAR capability:

 * Splunk ES query development and alert automation.
 * Splunk SOAR playbook development with 30 to 90 second automated response targets.
 * ESCU (Enterprise Security Content Updates) detection rules.

 * Automate compliance evidence:

 * eMASS API integration for automated evidence upload.
 * AWS Config conformance pack development for continuous compliance.
 * AWS Audit Manager control automation.
 * CORA evidence pipeline automation.