Cyber Test Engineer with DoD Secret / citizen

Veterans Inc.
Scott Air Force Base, IL, United States
30 days ago
Apply on www.disabledperson.com
Prepare application

Role details

Contract type
Contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services Automation of Tests Bash Shell Continuous Integration Python (Programming Language) Windows PowerShell Regression Testing Comptia Pentest+ CE Fortify (Software) Mendix SAP (Applications) Security Content Automation Protocol
+14 more
Security Information and Event Management SonarQube System Testing Enterprise Software Applications Delivery Pipeline Cloudformation Nessus Opsworks Terraform Splunk Scap Compliance Checker Devsecops Security Orchestration, Automation & Response Static Application Security Testing

Requirements

  • Certification Requirements: DoD 8140 - Foundational Intermediate - 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
  • Experience: 4+ years in security automation, compliance testing, or DevSecOps

STIG / SCAP Automation

  • Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
  • Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
  • Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

  • Proficiency with Tricentis test automation (SAP + Mendix regression testing)
  • Experience with SonarQube quality gates and CI/CD pipeline integration
  • Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline

  • GitLab CI/CD pipeline development and security-gate implementation
  • IaC testing (Terraform / CloudFormation validation)
  • Integration of security-scanning results into AWS Security Hub

SIEM / SOAR

  • Splunk ES query development and alert automation
  • Splunk SOAR playbook development (30-90 second automated response targets)
  • Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

  • eMASS API integration for automated evidence upload
  • AWS Config conformance-pack development for continuous compliance
  • AWS Audit Manager control automation
  • CORA evidence-pipeline automation

Preferred Skills

  • Python, PowerShell, or Bash scripting
  • AWS GovCloud experience (Lambda, EventBridge, Step Functions)
  • Understanding of RMF continuous-monitoring requirements
  • Experience with SAFe Agile methodology and PI planning

Equal employment opportunity, including veterans and individuals with disabilities.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.disabledperson.com
Prepare application

Good distractions

Loading talks and stories from around this role…