Cyber Test Engineer
Core
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities within an Impact Level 5 multi-cloud environment.
Role type
Senior IC security automation engineer (DevSecOps)
Builds
Automated security gates, compliance evidence pipelines, and continuous monitoring systems for mission-critical projects
Domain
Defense / Cybersecurity / Cloud Infrastructure
Required skills
Security automation, DevSecOps, SCAP benchmark scanning, CI/CD pipeline integration, Infrastructure as Code validation, Splunk SOAR, AWS Security Hub, eMASS API integration, Software Bill of Materials generation, Static Application Security Testing
Preferred skills
Trellix Policy Auditor, Tricentis test automation, AWS Config conformance packs, AWS Audit Manager, DoD 8140 qualification
Technologies
ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, Trellix Policy Auditor, Tricentis, SonarQube, fortify, CycloneDX, SPDX, GitLab CI/CD, Terraform, AWS CloudFormation, AWS Security Hub, Splunk Enterprise Security, Splunk SOAR, eMASS API, AWS Config, AWS Audit Manager
Responsibilities
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities; Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning; Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus; Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files; Automate Trellix Policy Auditor scanning for STIG compliance; Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing; Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines; Support software bill of materials generation using CycloneDX and SPDX standards; Develop GitLab CI/CD pipelines and implement automated security gates; Validate Infrastructure as Code developed using Terraform and AWS CloudFormation; Integrate security-scanning results into AWS Security Hub; Develop Splunk Enterprise Security queries and automate security alerts; Develop Splunk SOAR playbooks that support automated incident response; Implement Enterprise Security Content Updates detection rules; Integrate with the eMASS API to automate compliance-evidence uploads; Develop AWS Config conformance packs to support continuous compliance; Automate security controls using AWS Audit Manager; Support Continuous Operational Readiness Assessment evidence-pipeline automation
