Cyber Test Engineer

Location: Remote

Company

hirify.global is an information technology and financial management consulting firm delivering services for government and commercial customers.

What you will do

• Develop and maintain automated security compliance, testing, and continuous monitoring capabilities for an Impact Level 5 multi-cloud environment.
• Automate DISA STIG and SCAP benchmark scanning using ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, and Trellix Policy Auditor.
• Develop Tricentis test automation for SAP and Mendix regression testing and integrate SonarQube and Fortify security gates into CI/CD pipelines.
• Generate software bills of materials using CycloneDX and SPDX, develop GitLab CI/CD pipelines, and validate Terraform and AWS CloudFormation Infrastructure as Code.
• Integrate security findings with AWS Security Hub, develop Splunk Enterprise Security queries and SOAR playbooks, and implement automated security alerts and incident response.
• Automate compliance evidence and continuous monitoring through the eMASS API, AWS Config conformance packs, AWS Audit Manager, and Continuous Operational Readiness Assessment pipelines.

Requirements

• U.S. citizenship.
• Ability to obtain a Federal Secret security clearance; active clearance is preferred.
• At least four years of experience in security automation, compliance testing, DevSecOps, or a related discipline.
• Ability to meet applicable DoD 8140 qualification requirements for the System Testing and Evaluation Specialist work role.
• An applicable cybersecurity certification, such as Certified Ethical Hacker, CyberSec First Responder, CompTIA Cloud+, GIAC Security Essentials, CompTIA PenTest+, CompTIA Security+, or Systems Security Certified Practitioner.
• Experience with ACAS, Tenable SecurityCenter, Nessus, SCAP Compliance Checker, or Trellix Policy Auditor.
• Experience with Tricentis automation for SAP or Mendix regression testing; SonarQube or Fortify integration with CI/CD; and software bill of materials generation using CycloneDX or SPDX.
• Experience developing GitLab CI/CD pipelines, implementing automated security gates, and testing or validating Terraform or AWS CloudFormation.
• Experience integrating security-scanning results into AWS Security Hub and developing Splunk Enterprise Security queries, automated alerts, or Splunk SOAR playbooks.
• Experience with eMASS API integrations, AWS Config conformance packs, AWS Audit Manager, or comparable compliance automation.
• Creativity, adaptability, client-facing ability, strong organization and time management, excellent written and verbal communication, and professional presence.

Nice to have

• Proficiency with Python, PowerShell, or Bash scripting.
• Experience with AWS GovCloud, AWS Lambda, Amazon EventBridge, or AWS Step Functions.
• Understanding of Risk Management Framework continuous monitoring requirements.
• Experience with Scaled Agile Framework and Program Increment planning.
• Strong analytical, troubleshooting, technical communication, customer, and vendor relationship skills.
• Ability to work independently and collaborate with cybersecurity, engineering, compliance, and development teams.
• Experience complying with data standards and policies, learning new technologies and methodologies, or working with a Federal government agency.
• Department of War experience.

Culture & Benefits

• Remote work environment with a diverse, energizing company culture.
• Competitive salaries and generous paid time off.
• Paid holidays aligned with the Federal calendar.
• Medical, dental, vision, and life insurance.
• 401(k) retirement plan, team-building events, and professional development support.