Cyber Test Engineer

Job Description

CSCI Consulting is looking for a Cyber Test Engineer to support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment.  Demonstrate the ability to successfully deliver a complex, mission-critical project requiring coordination across multiple stakeholders, systems, and interdependent requirements.

Responsibilities

Develop and maintain automated security compliance, testing, and continuous monitoring capabilities

Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning

Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus

Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files

Automate Trellix Policy Auditor scanning for STIG compliance

Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing

Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines

Support software bill of materials generation using CycloneDX and SPDX standards

Develop GitLab CI/CD pipelines and implement automated security gates

Validate Infrastructure as Code developed using Terraform and AWS CloudFormation

Integrate security-scanning results into AWS Security Hub

Develop Splunk Enterprise Security queries and automate security alerts

Develop Splunk SOAR playbooks that support automated incident response

Implement Enterprise Security Content Updates detection rules

Integrate with the eMASS API to automate compliance-evidence uploads

Develop AWS Config conformance packs to support continuous compliance

Automate security controls using AWS Audit Manager

Support Continuous Operational Readiness Assessment evidence-pipeline automation

Minimum Requirements

U.S. citizenship

Must be able to obtain a Federal Secret security clearance (Active clearance preferred)

At least four years of experience in security automation, compliance testing, DevSecOps, or related discipline

Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role

Possession of an applicable cybersecurity certification, such as:

Certified Ethical Hacker

CyberSec First Responder

CompTIA Cloud+

GIAC Security Essentials

CompTIA PenTest+

CompTIA Security+

Systems Security Certified Practioner

Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor

Experience with Tricentis test automation supporting SAP or Mendix regression testing

Experience integrating SonarQube quality gates or fortify static application security testing with CI/CD pipelines

Experience generating software bills of materials using CycloneDX or SPDX

Experience developing GitLab CI/CD pipelines and implementing automated security gates

Experience testing or validating Infrastructure as Code using Terraform or AWS CloudFormation.

Experience integrating security-scanning results into AWS Security Hub.

Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.

Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities.

Creativity and adaptability in problem-solving

Ability to work with clients to understand their needs

Strong organizational and time-management skills

Excellent written and verbal communication skills

Professional presence

Preferred Skills

Proficiency with Python, PowerShell, or Bash scripting

Experience working within AWS GovCloud

Experience with AWS Lambda, Amazon EventBridge, or AWS Step Functions

Understanding of Risk Management Framework continuous monitoring requirements

Experience working in a Scaled Agile Framework environment

Experience participating in Program Increment planning

Strong analytical, troubleshooting, and technical communication skills

Ability to work independently and collaborate effectively with cybersecurity, engineering, compliance, and development teams

Ability to work in a team environment, as well as independently

Strong customer and vendor relationship skills

Demonstrated ability to comply with data standards and policies

Motivation to learn new technologies and methodologies that demonstrate value

Past experience working with a Federal government agency

Department of War experience is a plus!