Cyber SAP Test Engineer - DevSecOps & Cloud

C5T Corporation; Glenview (IL); On-site; USD 87,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

FSA

Life insurance

Paid holidays and RPTO

Job summary

C5T Corporation is hiring a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the JTMS IL5 multi-cloud environment. You will automate STIG and SCAP compliance, integrate testing into GitLab CI/CD, and develop Splunk detection and playbooks while enabling RMF continuous monitoring.

The role collaborates with ISSO/ISSE, supports SAFe Agile delivery, and contributes to a modern DevSecOps stack in a defense context.

Qualifications

• Four or more years of experience in security automation, compliance testing, or DevSecOps.
• Experience with ACAS, Nessus, and SCAP automation.
• Experience with CI/CD pipelines and code quality tools (GitLab, SonarQube, Fortify).
• Experience with Splunk ES and SOAR or comparable SIEM/SOAR platforms.

Responsibilities

• Automate STIG and SCAP compliance via ACAS and Nessus.
• Automate compliance testing within GitLab CI/CD pipelines and security gates.
• Develop SIEM and SOAR capabilities using Splunk ES and Splunk SOAR.
• Automate evidence collection with eMASS and AWS Config conformance packs.

Skills

Security automation

DevSecOps

CI/CD pipelines

Python scripting

PowerShell scripting

Education

DoD 8140 Foundations & Intermediates (CEH/CFR/Cloud+/GSEC/PenTest+/Security+/SSCP)

Tools

ACAS (Tenable SC)

Nessus

SCAP Compliance Checker

GitLab

SonarQube

Fortify

Terraform

CloudFormation

Splunk ES

Splunk SOAR

eMASS

AWS Config

Job description

C5T Corporation is hiring a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the JTMS IL5 multi-cloud environment. You will automate STIG and SCAP compliance, integrate testing into GitLab CI/CD, and develop Splunk detection and playbooks while enabling RMF continuous monitoring.

The role collaborates with ISSO/ISSE, supports SAFe Agile delivery, and contributes to a modern DevSecOps stack in a defense context.