This job is posted on behalf of VETS, Inc by Top Echelon.
VETS, Inc., is looking to add a Cyber Test Engineer/Automation engineer to our growing team. This role will support ISSO/ISSE security compliance, testing, and continuous‑monitoring automation for an IL5 multi‑cloud environment.
- Clearance: Interim Secret (minimum)
- Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
- Experience: 4+ years in security automation, compliance testing, or DevSecOps
STIG / SCAP Automation
- Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
- Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
- Automation of Trellix Policy Auditor STIG compliance scanning
Testing & Quality Tools
- Proficiency with Tricentis test automation (SAP + Mendix regression testing)
- Experience with SonarQube quality gates and CI/CD pipeline integration
- Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)
CI/CD Pipeline
- GitLab CI/CD pipeline development and security‑gate implementation
- IaC testing (Terraform / CloudFormation validation)
- Integration of security‑scanning results into AWS Security Hub
SIEM / SOAR
- Splunk ES query development and alert automation
- Splunk SOAR playbook development (30–90 second automated response targets)
- Experience with ESCU (Enterprise Security Content Updates) detection rules
Compliance Automation
- eMASS API integration for automated evidence upload
- AWS Config conformance‑pack development for continuous compliance
- AWS Audit Manager control automation
- CORA evidence‑pipeline automation
Preferred Skills
- Python, PowerShell, or Bash scripting
- AWS GovCloud experience (Lambda, EventBridge, Step Functions)
- Understanding of RMF continuous‑monitoring requirements
- Experience with SAFe Agile methodology and PI planning