Cyber Test Engineer

CSCI Consulting is looking for a Cyber Test Engineer to support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment. Demonstrate the ability to successfully deliver a complex, mission-critical project requiring coordination across multiple stakeholders, systems, and interdependent requirements.

- Develop and maintain automated security compliance, testing, and continuous monitoring capabilities

- Automate DISA Security Technical Implementation Guide and Security Content Automation Protocol benchmark scanning

- Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus

- Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files

- Automate Trellix Policy Auditor scanning for STIG compliance

- Develop and maintain Tricentis test automation supporting SAP and Mendix regression testing

- Integrate SonarQube quality gates and fortify static application security testing into CI/CD pipelines

- Support software bill of materials generation using CycloneDX and SPDX standards

- Develop GitLab CI/CD pipelines and implement automated security gates

- Validate Infrastructure as Code developed using Terraform and AWS CloudFormation

- Integrate security-scanning results into AWS Security Hub

- Develop Splunk Enterprise Security queries and automate security alerts

- Develop Splunk SOAR playbooks that support automated incident response

- Implement Enterprise Security Content Updates detection rules

- Integrate with the eMASS API to automate compliance-evidence uploads

- Develop AWS Config conformance packs to support continuous compliance

- Automate security controls using AWS Audit Manager

- Support Continuous Operational Readiness Assessment evidence-pipeline automation