Cyber Test Engineer

CDIT Solutions isseeking a Cyber Test Engineer to support the Joint Transportation ManagementSystem (JTMS) program for the United States Transportation Command(USTRANSCOM). This automation engineer supports ISSO/ISSE security compliance,testing, and continuous-monitoring automation for an IL5 multi-cloudenvironment.

Key Responsibilities

STIG / SCAPAutomation

Automate continuous DISA SCAP benchmark scanningusing ACAS (Tenable SC) and Nessus.

Use SCAP Compliance Checker (SCC) to validateXCCDF, ARF, and CKL results.

Automate Trellix Policy Auditor STIG compliancescanning.

Testing &Quality

Perform test automation with Tricentis,including SAP and Mendix regression testing.

Implement SonarQube quality gates and integratethem into CI/CD pipelines.

Support Fortify SAST scanning and software billof materials (SBOM) generation (CycloneDX / SPDX).

CI/CD Pipeline

Develop GitLab CI/CD pipelines and implementsecurity gates.

Perform IaC testing (Terraform / CloudFormationvalidation).

Integrate security-scanning results into AWSSecurity Hub.

SIEM / SOAR

Develop Splunk ES queries and alert automation.

Develop Splunk SOAR playbooks, targetingautomated response times of 30–90 seconds.

Apply ESCU (Enterprise Security Content Updates)detection rules.

ComplianceAutomation

Integrate with the eMASS API for automatedevidence upload.

Develop AWS Config conformance packs forcontinuous compliance.

Automate controls with AWS Audit Manager.

Automate CORA evidence pipelines.

Support ISSO/ISSE teams with securitycompliance, testing, and continuous monitoring.

Required Qualifications

Interim Secret clearance (minimum). Clearancemust be active, in scope, and held in DISS prior to start.

4+ years of experience in security automation,compliance testing, or DevSecOps.

DoD 8140 certification at the FoundationalIntermediate level for 671 System Testing & Evaluation Specialist(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC,PenTest+, Security+, or SSCP.

Experience with ACAS (Tenable SC) and Nessusautomation for continuous DISA SCAP benchmark scanning.

Knowledge of SCAP Compliance Checker (SCC) forXCCDF / ARF / CKL validation.

Experience automating Trellix Policy AuditorSTIG compliance scanning.

Proficiency with Tricentis test automation (SAPand Mendix regression testing).

Experience with SonarQube quality gates andCI/CD pipeline integration.

Familiarity with Fortify SAST and SBOMgeneration (CycloneDX / SPDX).

GitLab CI/CD pipeline development andsecurity-gate implementation.

IaC testing (Terraform / CloudFormationvalidation) and integration of security-scanning results into AWS Security Hub.

Splunk ES query development and alertautomation; Splunk SOAR playbook development; experience with ESCU detectionrules.

eMASS API integration for automated evidenceupload; AWS Config conformance-pack development; AWS Audit Manager controlautomation; CORA evidence-pipeline automation.

Preferred Qualifications

Python, PowerShell, or Bash scripting.

AWS GovCloud experience (Lambda, EventBridge,Step Functions).

Understanding of RMF continuous-monitoringrequirements.

Experience with SAFe Agile methodology and PIplanning.

Location, Travel & Compliance

Remote, with approximately 10% travel every 12weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of ScottAFB are preferred.

DoD 8140 compliance is required, as described inthe certification requirement above.