Job Requirements
Bethesda, MD
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$90,000 - $100,000
Job Description
The Security Test & Validation Engineer provides technical testing, validation, and security verification supporting Chrome Enterprise Premium (CEP) and Zero Trust Architecture (ZTA) implementation. The Engineer ensures browser, endpoint, access, security, and Zero Trust configurations are properly implemented, function as intended, and satisfy established technical and cybersecurity requirements.
Key Responsibilities
• Develop and execute test plans, test cases, validation procedures, and acceptance criteria for CEP and ZTA capabilities, while performing functional, regression, compatibility, integration, configuration, and security-control testing.
• Validate Chrome Browser Cloud Management (CBCM) enrollment, configuration, policy deployment, and enforcement.
• Test migration of applicable legacy Group Policy Object (GPO) configurations to CBCM and verify consistent policy application across applicable users and endpoints.
• Conduct browser, application, extension, authentication, and workflow compatibility testing.
• Validate identity, device, endpoint, application, access, and data-security controls supporting Zero Trust implementation.
• Test policy enforcement and access decisions against approved ZTA requirements and use cases.
• Validate CEP/ZTA integrations with applicable identity, endpoint security, SIEM, and enterprise security capabilities.
• Analyze test results, identify technical deficiencies, document findings, and coordinate remediation with engineering personnel.
• Perform retesting following configuration changes, remediation activities, and security findings.
• Support troubleshooting and root-cause analysis of defects identified during testing.
• Validate rollback, recovery, and remediation procedures prior to production implementation.
• Support pilot, deployment-readiness, and post-implementation validation activities.
• Generate technical evidence supporting cybersecurity, security-control validation, and authorization activities.
• Maintain traceability among requirements, configurations, test results, findings, remediation actions, and final validation.
• Develop and maintain test plans, validation reports, defect logs, test evidence, and related technical documentation.
• Provide technical validation findings and identify unresolved risks or deficiencies supporting Government deployment and acceptance decisions.
Required Certifications, Qualifications, and Experience
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline, or equivalent education and/or relevant experience.
• Demonstrated experience performing cybersecurity, system, endpoint, application, or infrastructure testing and validation.
• Experience independently developing and executing technical test cases and validation procedures.
• Working knowledge of cybersecurity controls, endpoint and configuration management, identity, and access-control technologies.
• Ability to translate technical and security requirements into measurable test and acceptance criteria.
• Experience analyzing test results, documenting deficiencies, and validating corrective actions.
• Strong analytical, troubleshooting, communication, and technical documentation skills.
• Ability to coordinate testing and remediation activities across cybersecurity, engineering, architecture, and system administration teams.
• This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI).
• Because an active DoD clearance is required, U.S. Citizenship is required.
Desired Qualifications
• Experience with Google Workspace, Chrome Enterprise Premium, and/or Chrome Browser Cloud Management.
• Experience with Microsoft Intune, Microsoft Configuration Manager/SCCM, or comparable endpoint-management technologies.
• Knowledge of Zero Trust principles and NIST SP 800-207.
• Familiarity with DoD Risk Management Framework (RMF), security controls, STIGs, vulnerability management, and authorization processes.
• Familiarity with SIEM, endpoint security, identity management, and conditional access technologies.
• Experience supporting enterprise migrations, pilot deployments, production-readiness testing, and post-implementation validation.
Benefits:
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
- Medical, dental & vision
- Critical Illness, Accident, and Hospital
- 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
- Life Insurance (Voluntary Life & AD&D for the employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave)
Key Responsibilities
• Develop and execute test plans, test cases, validation procedures, and acceptance criteria for CEP and ZTA capabilities, while performing functional, regression, compatibility, integration, configuration, and security-control testing.
• Validate Chrome Browser Cloud Management (CBCM) enrollment, configuration, policy deployment, and enforcement.
• Test migration of applicable legacy Group Policy Object (GPO) configurations to CBCM and verify consistent policy application across applicable users and endpoints.
• Conduct browser, application, extension, authentication, and workflow compatibility testing.
• Validate identity, device, endpoint, application, access, and data-security controls supporting Zero Trust implementation.
• Test policy enforcement and access decisions against approved ZTA requirements and use cases.
• Validate CEP/ZTA integrations with applicable identity, endpoint security, SIEM, and enterprise security capabilities.
• Analyze test results, identify technical deficiencies, document findings, and coordinate remediation with engineering personnel.
• Perform retesting following configuration changes, remediation activities, and security findings.
• Support troubleshooting and root-cause analysis of defects identified during testing.
• Validate rollback, recovery, and remediation procedures prior to production implementation.
• Support pilot, deployment-readiness, and post-implementation validation activities.
• Generate technical evidence supporting cybersecurity, security-control validation, and authorization activities.
• Maintain traceability among requirements, configurations, test results, findings, remediation actions, and final validation.
• Develop and maintain test plans, validation reports, defect logs, test evidence, and related technical documentation.
• Provide technical validation findings and identify unresolved risks or deficiencies supporting Government deployment and acceptance decisions.
Required Certifications, Qualifications, and Experience
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline, or equivalent education and/or relevant experience.
• Demonstrated experience performing cybersecurity, system, endpoint, application, or infrastructure testing and validation.
• Experience independently developing and executing technical test cases and validation procedures.
• Working knowledge of cybersecurity controls, endpoint and configuration management, identity, and access-control technologies.
• Ability to translate technical and security requirements into measurable test and acceptance criteria.
• Experience analyzing test results, documenting deficiencies, and validating corrective actions.
• Strong analytical, troubleshooting, communication, and technical documentation skills.
• Ability to coordinate testing and remediation activities across cybersecurity, engineering, architecture, and system administration teams.
• This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI).
• Because an active DoD clearance is required, U.S. Citizenship is required.
Desired Qualifications
• Experience with Google Workspace, Chrome Enterprise Premium, and/or Chrome Browser Cloud Management.
• Experience with Microsoft Intune, Microsoft Configuration Manager/SCCM, or comparable endpoint-management technologies.
• Knowledge of Zero Trust principles and NIST SP 800-207.
• Familiarity with DoD Risk Management Framework (RMF), security controls, STIGs, vulnerability management, and authorization processes.
• Familiarity with SIEM, endpoint security, identity management, and conditional access technologies.
• Experience supporting enterprise migrations, pilot deployments, production-readiness testing, and post-implementation validation.
Benefits:
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
- Medical, dental & vision
- Critical Illness, Accident, and Hospital
- 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
- Life Insurance (Voluntary Life & AD&D for the employee and dependents)
- Short and long-term disability
- Health Spending Account (HSA)
- Transportation benefits
- Employee Assistance Program
- Time Off/Leave (PTO, Vacation or Sick Leave)
group id: 10105424
