Job Requirements
Scott Air Force Base, IL
Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
CDIT Solutions isseeking a Cyber Test Engineer to support the Joint Transportation ManagementSystem (JTMS) program for the United States Transportation Command(USTRANSCOM). This automation engineer supports ISSO/ISSE security compliance,testing, and continuous-monitoring automation for an IL5 multi-cloudenvironment. Key Responsibilities
STIG / SCAPAutomation
• Automate continuous DISA SCAP benchmark scanningusing ACAS (Tenable SC) and Nessus.
• Use SCAP Compliance Checker (SCC) to validateXCCDF, ARF, and CKL results.
• Automate Trellix Policy Auditor STIG compliancescanning.
Testing &Quality
• Perform test automation with Tricentis,including SAP and Mendix regression testing.
• Implement SonarQube quality gates and integratethem into CI/CD pipelines.
• Support Fortify SAST scanning and software billof materials (SBOM) generation (CycloneDX / SPDX).
CI/CD Pipeline
• Develop GitLab CI/CD pipelines and implementsecurity gates.
• Perform IaC testing (Terraform / CloudFormationvalidation).
• Integrate security-scanning results into AWSSecurity Hub.
SIEM / SOAR
• Develop Splunk ES queries and alert automation.
• Develop Splunk SOAR playbooks, targetingautomated response times of 30-90 seconds.
• Apply ESCU (Enterprise Security Content Updates)detection rules.
ComplianceAutomation
• Integrate with the eMASS API for automatedevidence upload.
• Develop AWS Config conformance packs forcontinuous compliance.
• Automate controls with AWS Audit Manager.
• Automate CORA evidence pipelines.
• Support ISSO/ISSE teams with securitycompliance, testing, and continuous monitoring.
Required qualifications
• Interim Secret clearance (minimum). Clearancemust be active, in scope, and held in DISS prior to start.
• 4+ years of experience in security automation,compliance testing, or DevSecOps.
• DoD 8140 certification at the FoundationalIntermediate level for 671 System Testing & Evaluation Specialist(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC,PenTest+, Security+, or SSCP.
• Experience with ACAS (Tenable SC) and Nessusautomation for continuous DISA SCAP benchmark scanning.
• Knowledge of SCAP Compliance Checker (SCC) forXCCDF / ARF / CKL validation.
• Experience automating Trellix Policy AuditorSTIG compliance scanning.
• Proficiency with Tricentis test automation (SAPand Mendix regression testing).
• Experience with SonarQube quality gates andCI/CD pipeline integration.
• Familiarity with Fortify SAST and SBOMgeneration (CycloneDX / SPDX).
• GitLab CI/CD pipeline development andsecurity-gate implementation.
• IaC testing (Terraform / CloudFormationvalidation) and integration of security-scanning results into AWS Security Hub.
• Splunk ES query development and alertautomation; Splunk SOAR playbook development; experience with ESCU detectionrules.
• eMASS API integration for automated evidenceupload; AWS Config conformance-pack development; AWS Audit Manager controlautomation; CORA evidence-pipeline automation. Preferred Qualifications
• Python, PowerShell, or Bash scripting.
• AWS GovCloud experience (Lambda, EventBridge,Step Functions).
• Understanding of RMF continuous-monitoringrequirements.
• Experience with SAFe Agile methodology and PIplanning. Location, Travel & Compliance
• Remote, with approximately 10% travel every 12weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of ScottAFB are preferred.
• DoD 8140 compliance is required, as described inthe certification requirement above.
STIG / SCAPAutomation
• Automate continuous DISA SCAP benchmark scanningusing ACAS (Tenable SC) and Nessus.
• Use SCAP Compliance Checker (SCC) to validateXCCDF, ARF, and CKL results.
• Automate Trellix Policy Auditor STIG compliancescanning.
Testing &Quality
• Perform test automation with Tricentis,including SAP and Mendix regression testing.
• Implement SonarQube quality gates and integratethem into CI/CD pipelines.
• Support Fortify SAST scanning and software billof materials (SBOM) generation (CycloneDX / SPDX).
CI/CD Pipeline
• Develop GitLab CI/CD pipelines and implementsecurity gates.
• Perform IaC testing (Terraform / CloudFormationvalidation).
• Integrate security-scanning results into AWSSecurity Hub.
SIEM / SOAR
• Develop Splunk ES queries and alert automation.
• Develop Splunk SOAR playbooks, targetingautomated response times of 30-90 seconds.
• Apply ESCU (Enterprise Security Content Updates)detection rules.
ComplianceAutomation
• Integrate with the eMASS API for automatedevidence upload.
• Develop AWS Config conformance packs forcontinuous compliance.
• Automate controls with AWS Audit Manager.
• Automate CORA evidence pipelines.
• Support ISSO/ISSE teams with securitycompliance, testing, and continuous monitoring.
Required qualifications
• Interim Secret clearance (minimum). Clearancemust be active, in scope, and held in DISS prior to start.
• 4+ years of experience in security automation,compliance testing, or DevSecOps.
• DoD 8140 certification at the FoundationalIntermediate level for 671 System Testing & Evaluation Specialist(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC,PenTest+, Security+, or SSCP.
• Experience with ACAS (Tenable SC) and Nessusautomation for continuous DISA SCAP benchmark scanning.
• Knowledge of SCAP Compliance Checker (SCC) forXCCDF / ARF / CKL validation.
• Experience automating Trellix Policy AuditorSTIG compliance scanning.
• Proficiency with Tricentis test automation (SAPand Mendix regression testing).
• Experience with SonarQube quality gates andCI/CD pipeline integration.
• Familiarity with Fortify SAST and SBOMgeneration (CycloneDX / SPDX).
• GitLab CI/CD pipeline development andsecurity-gate implementation.
• IaC testing (Terraform / CloudFormationvalidation) and integration of security-scanning results into AWS Security Hub.
• Splunk ES query development and alertautomation; Splunk SOAR playbook development; experience with ESCU detectionrules.
• eMASS API integration for automated evidenceupload; AWS Config conformance-pack development; AWS Audit Manager controlautomation; CORA evidence-pipeline automation. Preferred Qualifications
• Python, PowerShell, or Bash scripting.
• AWS GovCloud experience (Lambda, EventBridge,Step Functions).
• Understanding of RMF continuous-monitoringrequirements.
• Experience with SAFe Agile methodology and PIplanning. Location, Travel & Compliance
• Remote, with approximately 10% travel every 12weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of ScottAFB are preferred.
• DoD 8140 compliance is required, as described inthe certification requirement above.
group id: 90806962