Cyber Test Engineer

Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous monitoring automation for an IL5 multi cloud environment. STIG / SCAP Automation Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.

Cyber Test Engineer

Local to Scott Air Force Base

The Opportunity
Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous monitoring automation for an IL5 multi cloud environment.

Required Qualifications:

• Clearance: Interim Secret (minimum)
• Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
• Experience: 4+ years in security automation, compliance testing, or DevSecOps

Technical Requirements:

STIG / SCAP Automation

• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline

• GitLab CI/CD pipeline development and security gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security scanning results into AWS Security Hub

SIEM / SOAR

• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

• eMASS API integration for automated evidence upload
• AWS Config conformance pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence pipeline automation

Preferred Skills

• Python, PowerShell, or Bash scripting
• AWS GovCloud experience (Lambda, EventBridge, Step Functions)
• Understanding of RMF continuous monitoring requirements
• Experience with SAFe Agile methodology and PI planning