Automation Engineer/Tester

Description

This Engineering role focuses on automating security compliance, testing and continuous monitoring work that supports ISSO and ISSE staff on an IL5 multi-cloud environment.

The team works on compliance, testing and monitoring automation for that environment.

Responsibilities

• Automate security compliance checks, testing and continuous monitoring across the IL5 multi-cloud environment.
• Support the ISSO and ISSE with that automation work.

Requirements

• Hold an interim Secret clearance at minimum, and a Secret clearance to start.
• Hold these certifications: DoD 8140 Foundational Intermediate (671 System Testing & Evaluation Specialist, tentative), CEH, CFR, Cloud+, GSEC, PenTest+, Security+ and SSCP.
• Bring 4+ years in security automation, compliance testing or DevSecOps.
• Automate STIG and SCAP compliance work, including ACAS (Tenable SC) and Nessus scans against DISA SCAP benchmarks on a continuous basis.
• Use SCAP Compliance Checker to validate XCCDF, ARF and CKL outputs.
• Automate Trellix Policy Auditor STIG scans.
• Run Tricentis test automation for SAP and Mendix regression testing.
• Use SonarQube quality gates and connect them to CI/CD pipelines.
• Work with Fortify SAST and generate SBOMs in CycloneDX or SPDX format.
• Build GitLab CI/CD pipelines that include security gates.
• Test infrastructure as code for Terraform or CloudFormation.
• Send security scan results into AWS Security Hub.
• Write Splunk ES queries and automate alerts.
• Build Splunk SOAR playbooks that respond automatically within 30 to 90 seconds.
• Have experience with ESCU detection rules.
• Integrate eMASS through its API to upload evidence automatically.
• Build AWS Config conformance packs for continuous compliance.
• Automate control checks in AWS Audit Manager.
• Automate CORA evidence pipelines.
• Preferred skills: scripting in Python, PowerShell or Bash.
• Preferred skills: AWS GovCloud experience with Lambda, EventBridge and Step Functions.
• Preferred skills: understanding of RMF continuous monitoring requirements.
• Preferred skills: experience with SAFe Agile methodology and PI planning.

Conditions

This is a full-time position with up to 10% local travel.

The role can be worked from more than one location, and the posted range is the national average for it.

The proposed salary range is $63,300 to $129,700.

Final pay depends on factors such as location, federal contract labor categories and wage rates, prior experience, skills, education and certifications.

Benefits

• Flexible time off that lets you take the time you need.
• Learning resources to help you pursue your career goals.
• Comprehensive benefits including healthcare, wellness, financial, retirement, family support, continuing education and time off.