Senior Cyber Test & Security Automation Engineer

CSCI Consulting, Inc.; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

PTO

Federal holidays observed

Full health benefits

Job summary

CSCI Consulting, Inc. is seeking a Cyber Test Engineer to deliver automated security compliance, testing, and continuous monitoring in a multi-cloud environment.

The role requires coordinating across stakeholders and interfacing with DISA and AWS services to ensure secure, compliant operations. You will automate DISA STIG/SCAP processes, integrate with CI/CD pipelines, and develop Splunk SOAR playbooks to support incident response.

Qualifications

• Minimum four years in security automation, compliance testing, DevSecOps, or related field.
• Active federal clearance preferred; ability to obtain a security clearance if not currently held.
• Experience meeting DoD 8140 qualifications for System Testing and Evaluation Specialist work role.
• Professional cybersecurity certifications listed in the job posting.

Responsibilities

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities.
• Automate DISA STIG benchmarks and SCAP scanning using preferred tools.
• Perform continuous SCAP benchmark scanning with ACAS, Tenable, and Nessus.
• Validate XCCDF, ARF, CKL via SCAP Compliance Checker.
• Develop Tricentis test automation for SAP and Mendix regression testing.
• Integrate SonarQube quality gates and Fortify with CI/CD pipelines.
• Support SBOM generation using CycloneDX and SPDX standards.
• Create GitLab CI/CD pipelines and automated security gates.
• Validate IaC with Terraform and AWS CloudFormation, and integrate results into AWS Security Hub.
• Develop Splunk queries and SOAR playbooks for automated incident response.
• Work with eMASS API for compliance-evidence uploads and AWS conformance packs.
• Contribute to continuous readiness evidence pipelines and operational readiness assessments.

Skills

Security automation

DevSecOps

Compliance testing

DoD 8140 knowledge

Excellent communication

Education

Certified cybersecurity certs (see list)

Bachelor's degree in a technical field

Tools

ACAS

Tenable SecurityCenter

Nessus

SCAP Compliance Checker

Trellix Policy Auditor

Tricentis

SonarQube

Fortify

CycloneDX / SPDX

GitLab CI/CD

Terraform

AWS CloudFormation

AWS Security Hub

Splunk Enterprise Security

Splunk SOAR

eMASS API

AWS Config

AWS Audit Manager

Job description

CSCI Consulting, Inc. is seeking a Cyber Test Engineer to deliver automated security compliance, testing, and continuous monitoring in a multi-cloud environment.

The role requires coordinating across stakeholders and interfacing with DISA and AWS services to ensure secure, compliant operations. You will automate DISA STIG/SCAP processes, integrate with CI/CD pipelines, and develop Splunk SOAR playbooks to support incident response.