Cyber Test Engineer

CDIT Solutions is
seeking a Cyber Test Engineer to support the Joint Transportation Management
System (JTMS) program for the United States Transportation Command
(USTRANSCOM). This automation engineer supports ISSO/ISSE security compliance,
testing, and continuous-monitoring automation for an IL5 multi-cloud
environment.

Key Responsibilities

STIG / SCAP
Automation

•       Automate continuous DISA SCAP benchmark scanning
using ACAS (Tenable SC) and Nessus.

•       Use SCAP Compliance Checker (SCC) to validate
XCCDF, ARF, and CKL results.

•       Automate Trellix Policy Auditor STIG compliance
scanning.

Testing &
Quality

•       Perform test automation with Tricentis,
including SAP and Mendix regression testing.

•       Implement SonarQube quality gates and integrate
them into CI/CD pipelines.

•       Support Fortify SAST scanning and software bill
of materials (SBOM) generation (CycloneDX / SPDX).

CI/CD Pipeline

•       Develop GitLab CI/CD pipelines and implement
security gates.

•       Perform IaC testing (Terraform / CloudFormation
validation).

•       Integrate security-scanning results into AWS
Security Hub.

SIEM / SOAR

•       Develop Splunk ES queries and alert automation.

•       Develop Splunk SOAR playbooks, targeting
automated response times of 30–90 seconds.

•       Apply ESCU (Enterprise Security Content Updates)
detection rules.

Compliance
Automation

•       Integrate with the eMASS API for automated
evidence upload.

•       Develop AWS Config conformance packs for
continuous compliance.

•       Automate controls with AWS Audit Manager.

•       Automate CORA evidence pipelines.

•       Support ISSO/ISSE teams with security
compliance, testing, and continuous monitoring.

Required Qualifications

•       Interim Secret clearance (minimum). Clearance
must be active, in scope, and held in DISS prior to start.

•       4+ years of experience in security automation,
compliance testing, or DevSecOps.

•       DoD 8140 certification at the Foundational
Intermediate level for 671 System Testing & Evaluation Specialist
(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC,
PenTest+, Security+, or SSCP.

•       Experience with ACAS (Tenable SC) and Nessus
automation for continuous DISA SCAP benchmark scanning.

•       Knowledge of SCAP Compliance Checker (SCC) for
XCCDF / ARF / CKL validation.

•       Experience automating Trellix Policy Auditor
STIG compliance scanning.

•       Proficiency with Tricentis test automation (SAP
and Mendix regression testing).

•       Experience with SonarQube quality gates and
CI/CD pipeline integration.

•       Familiarity with Fortify SAST and SBOM
generation (CycloneDX / SPDX).

•       GitLab CI/CD pipeline development and
security-gate implementation.

•       IaC testing (Terraform / CloudFormation
validation) and integration of security-scanning results into AWS Security Hub.

•       Splunk ES query development and alert
automation; Splunk SOAR playbook development; experience with ESCU detection
rules.

•       eMASS API integration for automated evidence
upload; AWS Config conformance-pack development; AWS Audit Manager control
automation; CORA evidence-pipeline automation.

Preferred Qualifications

•       Python, PowerShell, or Bash scripting.

•       AWS GovCloud experience (Lambda, EventBridge,
Step Functions).

•       Understanding of RMF continuous-monitoring
requirements.

•       Experience with SAFe Agile methodology and PI
planning.

Location, Travel & Compliance

•       Remote, with approximately 10% travel every 12
weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of Scott
AFB are preferred.

•       DoD 8140 compliance is required, as described in
the certification requirement above.