Cyber Test Engineer with Security Clearance

CDIT Solutions isseeking a Cyber Test Engineer to support the Joint Transportation ManagementSystem (JTMS) program for the United States Transportation Command(USTRANSCOM). This automation engineer supports ISSO/ISSE security compliance,testing, and continuous-monitoring automation for an IL5 multi-cloudenvironment.

Key Responsibilities STIG / SCAPAutomation • Automate continuous DISA SCAP benchmark scanningusing ACAS (Tenable SC) and Nessus. • Use SCAP Compliance Checker (SCC) to validateXCCDF, ARF, and CKL results. • Automate Trellix Policy Auditor STIG compliancescanning. Testing &Quality • Perform test automation with Tricentis,including SAP and Mendix regression testing. • Implement SonarQube quality gates and integratethem into CI/CD pipelines. • Support Fortify SAST scanning and software billof materials (SBOM) generation (CycloneDX / SPDX).

CI/CD Pipeline • Develop GitLab CI/CD pipelines and implementsecurity gates. • Perform IaC testing (Terraform / CloudFormationvalidation). • Integrate security-scanning results into AWSSecurity Hub. SIEM / SOAR • Develop Splunk ES queries and alert automation. • Develop Splunk SOAR playbooks, targetingautomated response times of 30-90 seconds. • Apply ESCU (Enterprise Security Content Updates)detection rules.

ComplianceAutomation • Integrate with the eMASS API for automatedevidence upload. • Develop AWS Config conformance packs forcontinuous compliance. • Automate controls with AWS Audit Manager. • Automate CORA evidence pipelines. • Support ISSO/ISSE teams with securitycompliance, testing, and continuous monitoring. Required qualifications • Interim Secret clearance (minimum).

Clearancemust be active, in scope, and held in DISS prior to start. • 4+ years of experience in security automation,compliance testing, or DevSecOps. • DoD 8140 certification at the FoundationalIntermediate level for 671 System Testing & Evaluation Specialist(tentative): one of CEH, CFR (CyberSec First Responder), Cloud+, GSEC,PenTest+, Security+, or SSCP. • Experience with ACAS (Tenable SC) and Nessusautomation for continuous DISA SCAP benchmark scanning. • Knowledge of SCAP Compliance Checker (SCC) forXCCDF / ARF / CKL validation. • Experience automating Trellix Policy AuditorSTIG compliance scanning. • Proficiency with Tricentis test automation (SAPand Mendix regression testing). • Experience with SonarQube quality gates andCI/CD pipeline integration. • Familiarity with Fortify SAST and SBOMgeneration (CycloneDX / SPDX). • GitLab CI/CD pipeline development andsecurity-gate implementation. • IaC testing (Terraform / CloudFormationvalidation) and integration of security-scanning results into AWS Security Hub. • Splunk ES query development and alertautomation; Splunk SOAR playbook development; experience with ESCU detectionrules. • eMASS API integration for automated evidenceupload; AWS Config conformance-pack development; AWS Audit Manager controlautomation; CORA evidence-pipeline automation.

Preferred Qualifications • Python, PowerShell, or Bash scripting. • AWS GovCloud experience (Lambda, EventBridge,Step Functions). • Understanding of RMF continuous-monitoringrequirements. • Experience with SAFe Agile methodology and PIplanning. Location, Travel & Compliance • Remote, with approximately 10% travel every 12weeks to Scott Air Force Base, IL. Candidates within a 4-hour radius of ScottAFB are preferred. • DoD 8140 compliance is required, as described inthe certification requirement above.