Business Analyst

Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous monitoring automation for an IL5 multi cloud environment. STIG / SCAP Automation Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.

Business Analyst

Local to Scott Air Force Base

The Opportunity
Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous monitoring automation for an IL5 multi cloud environment.

Required Qualifications:

• Clearance: Interim Secret (minimum)
• Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
• Experience: 4+ years in security automation, compliance testing, or DevSecOps

Technical Requirements:

STIG / SCAP Automation

• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline

• GitLab CI/CD pipeline development and security gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security scanning results into AWS Security Hub

SIEM / SOAR

• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

• eMASS API integration for automated evidence upload
• AWS Config conformance pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence pipeline automation

Preferred Skills

• Python, PowerShell, or Bash scripting
• AWS GovCloud experience (Lambda, EventBridge, Step Functions)
• Understanding of RMF continuous monitoring requirements
• Experience with SAFe Agile methodology and PI planning