SAP Test Engineer
About The Position
C5T Corporation is seeking a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the Joint Transportation Management System (JTMS), a mission-critical SAP S/4HANA program operating in an IL5 multi-cloud environment. The role supports ISSO and ISSE security compliance, testing, and monitoring, and works within a SAFe Agile delivery model. The successful candidate will automate STIG and SCAP compliance scanning; integrate security testing into GitLab CI/CD pipelines; develop Splunk detection and SOAR playbooks; and automate compliance evidence for Risk Management Framework (RMF) continuous monitoring. The position is based at Scott Air Force Base, Illinois. The work arrangement and salary range are to be confirmed.
Requirements
- Interim Secret clearance at minimum.
- DoD 8140 Foundational and Intermediate qualification for work role 671, System Testing and Evaluation Specialist (tentative), through one of the following certifications: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP.
- Four or more years of experience in security automation, compliance testing, or DevSecOps.
- Experience with ACAS (Tenable SC), Nessus, and SCAP Compliance Checker automation.
- Experience with CI/CD pipelines, security gates, and code quality tools such as GitLab, SonarQube, and Fortify.
- Experience with Splunk ES and SOAR or comparable SIEM and SOAR platforms.
- Experience automating compliance evidence with eMASS and AWS compliance services.
Nice To Haves
- Python, PowerShell, or Bash scripting.
- AWS GovCloud experience, including Lambda, EventBridge, and Step Functions.
- Understanding of RMF continuous monitoring requirements.
- Experience with SAFe Agile methodology and PI Planning.
Responsibilities
- Automate continuous DISA SCAP benchmark scanning using ACAS (Tenable SC) and Nessus.
- Validate XCCDF, ARF, and CKL results with SCAP Compliance Checker (SCC).
- Automate Trellix Policy Auditor STIG compliance scanning.
- Build Tricentis test automation for SAP and Mendix regression testing.
- Integrate SonarQube quality gates into CI/CD pipelines.
- Implement Fortify SAST and generate software bills of materials (SBOMs) in CycloneDX and SPDX formats.
- Develop GitLab CI/CD pipelines and implement security gates.
- Test Infrastructure as Code for Terraform and CloudFormation.
- Integrate security scanning results into AWS Security Hub.
- Develop Splunk ES queries and automate alerts.
- Develop Splunk SOAR playbooks with automated response targets of 30 to 90 seconds.
- Create ESCU (Enterprise Security Content Updates) detection rules.
- Integrate with the eMASS API to automate evidence uploads.
- Develop AWS Config conformance packs for continuous compliance.
- Automate AWS Audit Manager controls.
- Automate the CORA evidence pipeline.
- Partner with the ISSO and ISSE team and support a SAFe Agile delivery model.
Benefits
- Competitive compensation.
- Medical, dental, and vision insurance options.
- 401(k) retirement plan with company match.
- Flexible Spending Account (FSA).
- Supplemental insurance options, including accident, critical illness, and hospital indemnity coverage.
- Company-paid life insurance.
- Employee Assistance Program (EAP).
- 10 paid holidays annually.
- Responsible Paid Time Off (RPTO), providing flexible vacation and personal leave aligned with mission requirements.
- Opportunities for professional development and career growth.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
