Cyber Test Engineer

CSCI Consulting, Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

PTO

Federal holidays observed

Full health benefits

Job summary

CSCI Consulting, Inc. is seeking a Cyber Test Engineer to deliver automated security compliance, testing, and continuous monitoring in a multi-cloud environment.

The role requires coordinating across stakeholders and interfacing with DISA and AWS services to ensure secure, compliant operations. You will automate DISA STIG/SCAP processes, integrate with CI/CD pipelines, and develop Splunk SOAR playbooks to support incident response.

Qualifications

• Minimum four years in security automation, compliance testing, DevSecOps, or related field.
• Active federal clearance preferred; ability to obtain a security clearance if not currently held.
• Experience meeting DoD 8140 qualifications for System Testing and Evaluation Specialist work role.
• Professional cybersecurity certifications listed in the job posting.

Responsibilities

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
• Automate DISA STIG benchmarks and SCAP scanning using preferred tools.
• Perform continuous SCAP benchmark scanning with ACAS, Tenable, and Nessus.
• Validate XCCDF, ARF, CKL via SCAP Compliance Checker.
• Develop Tricentis test automation for SAP and Mendix regression testing.
• Integrate SonarQube quality gates and Fortify with CI/CD pipelines.
• Support SBOM generation using CycloneDX and SPDX standards.
• Create GitLab CI/CD pipelines and automated security gates.
• Validate IaC with Terraform and AWS CloudFormation, and integrate results into AWS Security Hub.
• Develop Splunk queries and SOAR playbooks for automated incident response.
• Work with eMASS API for compliance-evidence uploads and AWS conformance packs.
• Contribute to continuous readiness evidence pipelines and operational readiness assessments.

Skills

Security automation

DevSecOps

Compliance testing

DoD 8140 knowledge

Excellent communication

Education

Certified cybersecurity certs (see list)

Bachelor's degree in a technical field

Tools

ACAS

Tenable SecurityCenter

Nessus

SCAP Compliance Checker

Trellix Policy Auditor

Tricentis

SonarQube

Fortify

CycloneDX / SPDX

GitLab CI/CD

Terraform

AWS CloudFormation

AWS Security Hub

Splunk Enterprise Security

Splunk SOAR

eMASS API

AWS Config

AWS Audit Manager

Job description

CSCI Consulting is looking for a Cyber Test Engineer to support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment. Demonstrate the ability to successfully deliver a complex, mission-critical project requiring coordination across multiple stakeholders, systems, and interdependent requirements.

Responsibilities

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities
• Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning
• Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus
• Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files
• Automate Trellix Policy Auditor scanning for STIG compliance
• Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing
• Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines
• Support software bill of materials generation using CycloneDX and SPDX standards
• Develop GitLab CI/CD pipelines and implement automated security gates
• Validate Infrastructure as Code developed using Terraform and AWS CloudFormation
• Integrate security-scanning results into AWS Security Hub
• Develop Splunk Enterprise Security queries and automate security alerts
• Develop Splunk SOAR playbooks that support automated incident response
• Implement Enterprise Security Content Updates detection rules
• Integrate with the eMASS API to automate compliance-evidence uploads
• Develop AWS Config conformance packs to support continuous compliance
• Automate security controls using AWS Audit Manager
• Support Continuous Operational Readiness Assessment evidence-pipeline automation
• Must be able to obtain a Federal Secret security clearance (Active clearance preferred)
• At least four years of experience in security automation, compliance testing, DevSecOps, or related discipline
• Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role
• Possession of an applicable cybersecurity certification, such as:
  • Certified Ethical Hacker
  • CyberSec First Responder
  • CompTIA Cloud+
  • GIAC Security Essentials
  • CompTIA PenTest+
  • CompTIA Security+
  • Systems Security Certified Practioner
• Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor
• Experience with Tricentis test automation supporting SAP or Mendix regression testing
• Experience integrating SonarQube quality gates or fortify static application security testing with CI/CD pipelines
• Experience generating software bills of materials using CycloneDX or SPDX
• Experience developing GitLab CI/CD pipelines and implementing automated security gates
• Experience testing or validating Infrastructure as Code using Terraform or AWS CloudFormation.
• Experience integrating security-scanning results into AWS Security Hub.
• Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.
• Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities.
• Creativity and adaptability in problem-solving
• Ability to work with clients to understand their needs
• Strong organizational and time-management skills
• Excellent written and verbal communication skills
• Professional presence

Preferred Skills

• Proficiency with Python, PowerShell, or Bash scripting
• Experience working within AWS GovCloud
• Experience with AWS Lambda, Amazon EventBridge, or AWS Step Functions
• Understanding of Risk Management Framework continuous monitoring requirements
• Experience working in a Scaled Agile Framework environment
• Experience participating in Program Increment planning
• Strong analytical, troubleshooting, and technical communication skills
• Ability to work independently and collaborate effectively with cybersecurity, engineering, compliance, and development teams
• Ability to work in a team environment, as well as independently
• Strong customer and vendor relationship skills
• Demonstrated ability to comply with data standards and policies
• Motivation to learn new technologies and methodologies that demonstrate value
• Past experience working with a Federal government agency
• Department of War experience is a plus!

About CSCI

CSCI is an award-winning information technology and financial management consulting firm founded on one simple philosophy: “Do what is right, always.” We apply this philosophy across all elements of our growing business, from delivering world-class s ervices for customers to providing an environment where associates thrive both personally and professionally. At CSCI, work and fun aren’t diametrically opposed!

At CSCI, our goal is to hire people with proven track records and retain them with an energizing, diverse company culture. We value each associate’s natural drive to excel, and we provide them with the freedom to do things their way. CSCI seeks the best and brightest in the industry—those who are ready to move their lives and career forward. Join us today and get excited about Mondays again!

Benefits of Working at CSCI

• Generous Paid Time Off (PTO) package
• Paid holidays aligned to the Federal calendar
• Full health benefits including medical, dental, vision, and life insurance
• Team building events

Legal

CSCI complies with all applicable Federal, state, and local employment regulations. Please reach out to [e-mail] with any questions.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. CSCI provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

If you require an accommodation, please contact CSCI Human Resources for further assistance. For questions regarding the qualifications listed above, please contact the CSCI Recruiting Team.

E-Verify

CSCI participates in E-Verify to confirm the employment eligibility of all newly hired employees. For more information, please visit www.dhs.gov/E-Verify .

As part of the application and recruitment process, CSCI Consulting, Inc. may collect personal information as described under the California Consumer Privacy Act (CCPA).

This information is collected solely for employment-related purposes, including evaluating your qualifications, processing your application, and complying with legal obligations.

By applying to this position, you acknowledge that you have read and understand the following notice regarding the collection of your personal information as a job applicant:

• Categories of Information Collected: Personal identifiers, employment history, educational information, and any other information provided in your application or as part of the interview process.
• Purposes for Collecting Information: To review your application, assess your qualifications, and manage the hiring process.
• Retention and Security: Information collected will be retained indefinitely and will be securely stored and handled in accordance with CCPA guidelines and CSCI Consulting, Inc. policies.
• Rights of Applicants: Under CCPA, California residents have the right to request information about the personal data we collect, delete it, and request restrictions on certain uses. However, some information may be retained as required by law.

For further information, or to exercise your rights under the CCPA, please contact CSCI’s HR team.

Disclaimer

The above declarations are not intended to be an all-inclusive list of the duties and responsibilities of the job described, nor are they intended to be such a listing of the skills and abilities required to do the job. Rather, they are intended only to describe the general nature of the job.