Cyber Test Engineer with DoD Secret / citizen

Veterans Enterprise Technology Solutions Inc; Illinois; A distancia; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

VETS, Inc. is seeking a Cyber Test Engineer to support DoD security compliance, testing, and automation in an IL5 multi‑cloud environment. The role focuses on ISSO/ISSE tasks, SCAP/STIG automation, and CI/CD integration to ensure continuous monitoring across platforms.

Applicants should have 4+ years in security automation or DevSecOps, with DoD-style clearance and experience with ACAS, Nessus, Tricentis, and Splunk tooling. This is a full-remote direct hire position at Scott AFB, IL.

Formación

• 4+ years in security automation, compliance testing, or DevSecOps.
• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation.
• Automation of Trellix Policy Auditor STIG compliance scanning.
• Proficiency with Tricentis test automation (SAP + Mendix regression testing).
• Experience with SonarQube quality gates and CI/CD pipeline integration.
• Familiarity with Fortify SAST and SBOM generation (CycloneDX / SPDX).
• GitLab CI/CD pipeline development and security-gate implementation.
• IaC testing (Terraform / CloudFormation validation).
• Integration of security-scanning results into AWS Security Hub.
• Splunk ES query development and alert automation.
• Splunk SOAR playbook development (30–90 second automated response targets).
• Experience with ESCU detection rules.
• eMASS API integration for automated evidence upload.
• AWS Config conformance-pack development for continuous compliance.
• AWS Audit Manager control automation.
• CORA evidence-pipeline automation.
• Python, PowerShell, or Bash scripting.
• AWS GovCloud experience (Lambda, EventBridge, Step Functions).
• Understanding of RMF continuous-monitoring requirements.
• Experience with SAFe Agile methodology and PI planning.

Responsabilidades

• Implement and automate security testing and compliance checks.
• Develop and maintain CI/CD pipelines with integrated security gates.
• Manage STIG/SCAP automation and evidence pipelines.
• Collaborate on cloud compliance in AWS GovCloud and multi‑cloud environments.
• Support SOAR/SIEM rule development and rapid incident responses.

Conocimientos

Security automation

CI/CD

Scripting (Python/PowerShell/Bash)

SAFe Agile & PI planning

Herramientas

ACAS (Tenable SC)

Nessus

SCAP Compliance Checker

Tricentis

SonarQube

Fortify SAST

SBOM (CycloneDX/SPDX)

Descripción del empleo

Cyber Test Engineer with DoD Secret / citizen

Scott Air Force Base, Illinois

ID: j-3038

JOB TYPE: Direct Hire

REMOTE STATUS: Full Remote

VETS, Inc., is looking to add a Cyber Test Engineer/Automation engineer to our growing team. This role will support ISSO/ISSE security compliance, testing, and continuous‑monitoring automation for an IL5 multi‑cloud environment.

• Clearance: Interim Secret (minimum)
• Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
• Experience: 4+ years in security automation, compliance testing, or DevSecOps

STIG / SCAP Automation

• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

CI/CD Pipeline

• GitLab CI/CD pipeline development and security‑gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security‑scanning results into AWS Security Hub

SIEM / SOAR

• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

• eMASS API integration for automated evidence upload
• AWS Config conformance‑pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence‑pipeline automation

Preferred Skills

• Python, PowerShell, or Bash scripting
• AWS GovCloud experience (Lambda, EventBridge, Step Functions)
• Understanding of RMF continuous‑monitoring requirements
• Experience with SAFe Agile methodology and PI planning

Equal employment opportunity, including veterans and individuals with disabilities.

PI288073990