cditBelleville, IL
Cyber Test Engineer
Cyber Test Engineer
Cyber Test Engineer
cditBelleville, IL
yesterday
Software Quality Assurance Analysts and TestersInformation Security EngineersComputer Systems Engineers/Architects
Computer Systems Design ServicesCustom Computer Programming ServicesOther Scientific and Technical Consulting Services
Apply for this role (opens in a new tab)CDIT Solutions isseeking a Cyber Test Engineer to support the Joint Transportation Management System (JTMS) program for the United States Transportation Command(USTRANSCOM). This automation engineer supports ISSO/ISSE security compliance, testing, and continuous-monitoring automation for an IL5 multi-cloudenvironment.
Key Responsibilities: STIG / SCAPAutomation
- Automate continuous DISA SCAP benchmark scanningusing ACAS (Tenable SC) and Nessus.
- Use SCAP Compliance Checker (SCC) to validateXCCDF, ARF, and CKL results.
- Automate Trellix Policy Auditor STIG compliancescanning. Testing &Quality
- Perform test automation with Tricentis, including SAP and Mendix regression testing.
- Implement SonarQube quality gates and integratethem into CI/CD pipelines.
- Support Fortify SAST scanning and software billof materials (SBOM) generation (CycloneDX / SPDX).CI/CD Pipeline
- Develop GitLab CI/CD pipelines and implementsecurity gates.
- Perform IaC testing (Terraform / CloudFormationvalidation).
- Integrate security-scanning results into AWSSecurity Hub. SIEM / SOAR
- Develop Splunk ES queries and alert automation.
- Develop Splunk SOAR playbooks, targetingautomated response times of 30–90 seconds.
- Apply ESCU (Enterprise Security Content Updates)detection rules. Compliance Automation
- Integrate with the eMASS API for automatedevidence upload.
- Develop AWS Config conformance packs forcontinuous compliance.
- Automate controls with AWS Audit Manager.
- Automate CORA evidence pipelines.
- Support ISSO/ISSE teams with securitycompliance, testing, and continuous monitoring.
Required Qualifications:
- Interim Secret clearance (minimum). Clearancemust be active, in scope, and held in DISS prior to start.
- 4+ years of experience in security automation, compliance testing, or DevSecOps.
- DoD 8140 certification at the Foundational Intermediate level for 671 System Testing & Evaluation Specialist(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC, PenTest+, Security+, or SSCP.
- Experience with ACAS (Tenable SC) and Nessusautomation for continuous DISA SCAP benchmark scanning.
- Knowledge of SCAP Compliance Checker (SCC) forXCCDF / ARF / CKL validation.
- Experience automating Trellix Policy AuditorSTIG compliance scanning.
- Proficiency with Tricentis test automation (SAPand Mendix regression testing).
- Experience with SonarQube quality gates andCI/CD pipeline integration.
- Familiarity with Fortify SAST and SBOMgeneration (CycloneDX / SPDX).
- GitLab CI/CD pipeline development andsecurity-gate implementation.
- IaC testing (Terraform / CloudFormationvalidation) and integration of security-scanning results into AWS Security Hub.
- Splunk ES query development and alertautomation; Splunk SOAR playbook development; experience with ESCU detectionrules.
- eMASS API integration for automated evidenceupload; AWS Config conformance-pack development; AWS Audit Manager controlautomation; CORA evidence-pipeline automation.
Preferred Qualifications:
- Python, PowerShell, or Bash scripting.
- AWS GovCloud experience (Lambda, EventBridge, Step Functions).
- Understanding of RMF continuous-monitoringrequirements.
- Experience with SAFe Agile methodology and PIplanning. Location, Travel & Compliance
- Remote, with approximately 10% travel every 12weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of ScottAFB are preferred.
- DoD 8140 compliance is required, as described inthe certification requirement above.
Also on the board Same function, level within a rung
Level
Senior
Location
Belleville, IL
Occupation
Software Quality Assurance Analysts and Testers
Industry
Computer Systems Design Services
Posted
yesterday