Automation Engineer/Tester

CACI • Scott AFB, IL

2d • Onsite

About The Position

Automation engineer supporting ISSO/ISSE security compliance, testing, and continuous-monitoring automation for an IL5 multi-cloud environment.

Requirements

• Interim Secret (minimum) clearance
• DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) Certification
• CEH (Certified Ethical Hacker) Certification
• CFR (CyberSec First Responder) Certification
• Cloud+ Certification
• GSEC Certification
• PenTest+ Certification
• Security+ Certification
• SSCP Certification
• 4+ years in security automation, compliance testing, or DevSecOps
• STIG / SCAP Automation Experience
• Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning
• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)
• GitLab CI/CD pipeline development and security-gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security-scanning results into AWS Security Hub
• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules
• eMASS API integration for automated evidence upload
• AWS Config conformance-pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence-pipeline automation

Nice To Haves

• Python, PowerShell, or Bash scripting
• AWS GovCloud experience (Lambda, EventBridge, Step Functions)
• Understanding of RMF continuous-monitoring requirements
• Experience with SAFe Agile methodology and PI planning

Responsibilities

• Support ISSO/ISSE security compliance, testing, and continuous-monitoring automation for an IL5 multi-cloud environment.
• STIG / SCAP Automation
• Automation with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
• Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
• Automation of Trellix Policy Auditor STIG compliance scanning
• Proficiency with Tricentis test automation (SAP + Mendix regression testing)
• Experience with SonarQube quality gates and CI/CD pipeline integration
• Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)
• GitLab CI/CD pipeline development and security-gate implementation
• IaC testing (Terraform / CloudFormation validation)
• Integration of security-scanning results into AWS Security Hub
• Splunk ES query development and alert automation
• Splunk SOAR playbook development (30–90 second automated response targets)
• Experience with ESCU (Enterprise Security Content Updates) detection rules
• eMASS API integration for automated evidence upload
• AWS Config conformance-pack development for continuous compliance
• AWS Audit Manager control automation
• CORA evidence-pipeline automation

Benefits

• Healthcare
• Wellness
• Financial
• Retirement
• Family support
• Continuing education
• Time off benefits
• Flexible time off benefit
• Robust learning resources

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed