Cyber Test Engineer

CSCI Consulting

. Support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment .

Posted 10/27/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security automation, compliance testing, and continuous monitoring within multi-cloud environments, utilizing tools such as ACAS, Nessus, and GitLab CI/CD. Proficient in developing automated security solutions and integrating security practices into software development lifecycles.

Highest-signal resume keywords

Security AutomationCompliance TestingGitLab CI/CD PipelinesACAS ExperienceCybersecurity Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Automated Security ComplianceContinuous MonitoringDISA STIG AutomationInfrastructure as Code ValidationSplunk Enterprise Security QueriesTricentis Test AutomationSonarQube IntegrationAWS Config Conformance PacksSCAP Compliance CheckerTenable SecurityCenter

Soft Skills

Problem-SolvingOrganizational SkillsTime-Management SkillsCommunication SkillsProfessional Presence

Tools & Technologies

AWS Security HubFortify Static Application Security TestingCycloneDXSPDXTrellix Policy AuditorAWS Audit ManagerEMASS APITerraformAWS CloudFormationNessus

Certifications & Qualifications

Certified Ethical HackerCyberSec First ResponderCompTIA Cloud+GIAC Security EssentialsCompTIA PenTest+CompTIA Security+Systems Security Certified Practitioner

Industry Keywords

DevSecOpsDoD 8140 QualificationRisk Management FrameworkScaled Agile FrameworkFederal Government Agency Experience

Tech Stack

Tools & technologies

AWSCloudCyber SecurityPythonSplunkTerraform

About the role

Key responsibilities & impact

Support Information System Security Officer and Information System Security Engineer security compliance, automated testing, and continuous monitoring activities within an Impact Level 5 multi-cloud environment
Develop and maintain automated security compliance, testing, and continuous monitoring capabilities
Automate DISA STIG and SCAP benchmark scanning
Perform continuous DISA SCAP benchmark scanning using ACAS, Tenable SecurityCenter, and Nessus
Use SCAP Compliance Checker to validate XCCDF, ARF, and CKL files
Automate Trellix Policy Auditor scanning for STIG compliance
Develop and maintain Tricentis test automation for SAP and Mendix regression testing
Integrate SonarQube quality gates and Fortify static application security testing into CI/CD pipelines
Support software bill of materials generation using CycloneDX and SPDX standards
Develop GitLab CI/CD pipelines and implement automated security gates
Validate Infrastructure as Code using Terraform and AWS CloudFormation
Integrate security-scanning results into AWS Security Hub
Develop Splunk Enterprise Security queries and automate security alerts
Develop Splunk SOAR playbooks supporting automated incident response
Implement Enterprise Security Content Updates detection rules
Integrate with the eMASS API to automate compliance-evidence uploads
Develop AWS Config conformance packs for continuous compliance
Automate security controls using AWS Audit Manager
Support Continuous Operational Readiness Assessment evidence-pipeline automation
Coordinate delivery of complex, mission-critical work across stakeholders, systems, and interdependent requirements

Requirements

What you’ll need

U.S. citizenship
Must be able to obtain a Federal Secret security clearance (Active clearance preferred)
At least four years of experience in security automation, compliance testing, DevSecOps, or related discipline
Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role
Possession of an applicable cybersecurity certification, such as Certified Ethical Hacker, CyberSec First Responder, CompTIA Cloud+, GIAC Security Essentials, CompTIA PenTest+, CompTIA Security+, or Systems Security Certified Practioner
Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor
Experience with Tricentis test automation supporting SAP or Mendix regression testing
Experience integrating SonarQube quality gates or Fortify static application security testing with CI/CD pipelines
Experience generating software bills of materials using CycloneDX or SPDX
Experience developing GitLab CI/CD pipelines and implementing automated security gates
Experience testing or validating Infrastructure as Code using Terraform or AWS CloudFormation
Experience integrating security-scanning results into AWS Security Hub
Experience developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks
Experience with eMASS API integrations, AWS Config Conformance packs, AWS Audit Manager, or comparable compliance-automation capabilities
Creativity and adaptability in problem-solving
Ability to work with clients to understand their needs
Strong organizational and time-management skills
Excellent written and verbal communication skills
Professional presence
Preferred: proficiency with Python, PowerShell, or Bash scripting; AWS GovCloud; AWS Lambda, Amazon EventBridge, or AWS Step Functions; Risk Management Framework continuous monitoring; Scaled Agile Framework; Program Increment planning; Federal government agency experience; Department of War experience

Benefits

Comp & perks

Competitive salaries
Generous Paid Time Off (PTO) package
Paid holidays aligned to the Federal calendar
Full health benefits including medical, dental, vision, and life insurance
401(k) retirement plan
Team building events
Professional development support