Cyber Test Engineer
CDIT•Scott Air Force Base, IL
•Remote
About The Position
CDIT Solutions is seeking a Cyber Test Engineer to support the Joint Transportation Management System (JTMS) program for the United States Transportation Command (USTRANSCOM). The role supports ISSO/ISSE security compliance, testing, and continuous-monitoring automation for an IL5 multi-cloud environment. The position is remote, with approximately 10% travel every 12 weeks to Scott Air Force Base, Illinois. Candidates within a four-hour radius of Scott AFB are preferred. DoD 8140 compliance is required.
Requirements
- Hold an active, in-scope Interim Secret clearance in DISS before starting; Secret clearance is the minimum.
- Have 4 or more years of experience in security automation, compliance testing, or DevSecOps.
- Hold a DoD 8140 certification at the Foundational Intermediate level for 671 System Testing & Evaluation Specialist (tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC, PenTest+, Security+, or SSCP.
- Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
- Knowledge of SCAP Compliance Checker (SCC) for XCCDF, ARF, and CKL validation.
- Experience automating Trellix Policy Auditor STIG compliance scanning.
- Proficiency with Tricentis test automation for SAP and Mendix regression testing.
- Experience with SonarQube quality gates and CI/CD pipeline integration.
- Familiarity with Fortify SAST and SBOM generation using CycloneDX or SPDX.
- Experience developing GitLab CI/CD pipelines and implementing security gates.
- Experience with IaC testing, including Terraform and CloudFormation validation, and integrating security-scanning results into AWS Security Hub.
- Experience developing Splunk ES queries and alert automation, developing Splunk SOAR playbooks, and using ESCU detection rules.
- Experience with eMASS API integration for automated evidence upload, AWS Config conformance-pack development, AWS Audit Manager control automation, and CORA evidence-pipeline automation.
- DoD 8140 compliance, as specified in the certification requirement.
Nice To Haves
- Python, PowerShell, or Bash scripting.
- AWS GovCloud experience, including Lambda, EventBridge, and Step Functions.
- Understanding of RMF continuous-monitoring requirements.
- Experience with SAFe Agile methodology and PI planning.
- Location within a four-hour radius of Scott Air Force Base, Illinois.
Responsibilities
- Automate continuous DISA SCAP benchmark scanning using ACAS (Tenable SC) and Nessus.
- Use SCAP Compliance Checker (SCC) to validate XCCDF, ARF, and CKL results.
- Automate Trellix Policy Auditor STIG compliance scanning.
- Perform test automation with Tricentis, including SAP and Mendix regression testing.
- Implement SonarQube quality gates and integrate them into CI/CD pipelines.
- Support Fortify SAST scanning and software bill of materials (SBOM) generation using CycloneDX or SPDX.
- Develop GitLab CI/CD pipelines and implement security gates.
- Perform infrastructure-as-code testing, including Terraform and CloudFormation validation.
- Integrate security-scanning results into AWS Security Hub.
- Develop Splunk ES queries and alert automation.
- Develop Splunk SOAR playbooks targeting automated response times of 30–90 seconds.
- Apply ESCU (Enterprise Security Content Updates) detection rules.
- Integrate with the eMASS API for automated evidence upload.
- Develop AWS Config conformance packs for continuous compliance.
- Automate controls with AWS Audit Manager.
- Automate CORA evidence pipelines.
- Support ISSO/ISSE teams with security compliance, testing, and continuous monitoring.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
