Cyber Test Engineer with DoD Secret / citizen

Scott Air Force Base, Illinois
IDj-3038
Job TypeDirect Hire
Remote TypeFull Remote


VETS, Inc., is looking to add a Cyber Test Engineer/Automation engineer to our growing team.  This role will support ISSO/ISSE security compliance, testing, and continuous‑monitoring automation for an IL5 multi‑cloud environment.

  • Clearance: Interim Secret (minimum)
  • Certification Requirements: DoD 8140 – Foundational Intermediate – 671 System Testing & Evaluation Specialist (Tentative) CEH (Certified Ethical Hacker) CFR (CyberSec First Responder) Cloud+ GSEC PenTest+ Security+ SSCP
  • Experience: 4+ years in security automation, compliance testing, or DevSecOps

STIG / SCAP Automation

  • Experience with ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning
  • Knowledge of SCAP Compliance Checker (SCC) for XCCDF / ARF / CKL validation
  • Automation of Trellix Policy Auditor STIG compliance scanning

Testing & Quality Tools

  • Proficiency with Tricentis test automation (SAP + Mendix regression testing)
  • Experience with SonarQube quality gates and CI/CD pipeline integration
  • Familiarity with Fortify SAST and software bill of materials (SBOM) generation (CycloneDX / SPDX)

 

CI/CD Pipeline

  • GitLab CI/CD pipeline development and security‑gate implementation
  • IaC testing (Terraform / CloudFormation validation)
  • Integration of security‑scanning results into AWS Security Hub

 

SIEM / SOAR

  • Splunk ES query development and alert automation
  • Splunk SOAR playbook development (30–90 second automated response targets)
  • Experience with ESCU (Enterprise Security Content Updates) detection rules

Compliance Automation

  • eMASS API integration for automated evidence upload
  • AWS Config conformance‑pack development for continuous compliance
  • AWS Audit Manager control automation
  • CORA evidence‑pipeline automation

Preferred Skills

  • Python, PowerShell, or Bash scripting
  • AWS GovCloud experience (Lambda, EventBridge, Step Functions)
  • Understanding of RMF continuous‑monitoring requirements
  • Experience with SAFe Agile methodology and PI planning

 

Drag & Drop Resume

(PNG, JPEG, PDF, DOC, TXT)

Message & data rates may apply to all numbers allowed to receive messages

Message frequency varies. Text STOP to opt-out or HELP for assistance