SAP Test Engineer

Cyber Test Engineer

Company: C5T Corporation

Job Location: Scott Air Force Base, Illinois

Position Type: Full-Time

Work Arrangement: To be confirmed

Security Clearance: Interim Secret Required (minimum)

Salary Range: To be confirmed

The Opportunity

Join C5T Corporation in supporting the Joint Transportation Management System (JTMS), a mission-critical SAP S/4HANA program operating in an IL5 multi-cloud environment.

As a Cyber Test Engineer, you will build the automation that powers ISSO and ISSE security compliance, testing, and continuous monitoring, from STIG and SCAP scanning to CI/CD security gates and SIEM response playbooks.

This position offers the opportunity to strengthen the security posture of a critical defense logistics platform while working with modern DevSecOps, cloud, and compliance tooling.

Company Overview

C5T Corporation is a certified Service-Disabled Veteran-Owned Small Business headquartered at Scott Air Force Base, Illinois. Founded in 2005 by three veterans, C5T delivers mission-focused solutions to the Department of Defense and other government and commercial organizations.

Our team combines operational expertise, innovative thinking, technology, and practical problem-solving to help customers address complex challenges and achieve mission success.

Our Core Values: Integrity | Excellence | Patriotism

Position Summary

C5T is seeking a Cyber Test Engineer to automate security compliance testing and continuous monitoring for the JTMS IL5 multi-cloud environment.

The successful candidate will automate STIG and SCAP compliance scanning, integrate security testing into GitLab CI/CD pipelines, develop Splunk detection and SOAR playbooks, and automate compliance evidence for RMF continuous monitoring.

The role partners closely with the ISSO and ISSE team and supports a SAFe Agile delivery model.

Key Responsibilities

• Automate STIG and SCAP compliance:

• ACAS (Tenable SC) and Nessus automation for continuous DISA SCAP benchmark scanning.
• SCAP Compliance Checker (SCC) validation of XCCDF, ARF, and CKL results.
• Automation of Trellix Policy Auditor STIG compliance scanning.

• Build testing and quality automation:

• Tricentis test automation for SAP and Mendix regression testing.
• SonarQube quality gates and CI/CD pipeline integration.
• Fortify SAST and software bill of materials (SBOM) generation in CycloneDX and SPDX.

• Develop secure CI/CD pipelines:

• GitLab CI/CD pipeline development and security gate implementation.
• Infrastructure as Code testing for Terraform and CloudFormation.
• Integration of security scanning results into AWS Security Hub.

• Develop SIEM and SOAR capability:

• Splunk ES query development and alert automation.
• Splunk SOAR playbook development with 30 to 90 second automated response targets.
• ESCU (Enterprise Security Content Updates) detection rules.

• Automate compliance evidence:

• eMASS API integration for automated evidence upload.
• AWS Config conformance pack development for continuous compliance.
• AWS Audit Manager control automation.
• CORA evidence pipeline automation.

Required Qualifications

• Interim Secret clearance at minimum.
• DoD 8140 Foundational and Intermediate qualification for work role 671, System Testing and Evaluation Specialist (tentative), through one of the following: CEH, CFR, Cloud+, GSEC, PenTest+, Security+, or SSCP.
• Four or more years of experience in security automation, compliance testing, or DevSecOps.
• Experience with ACAS (Tenable SC), Nessus, and SCAP Compliance Checker automation.
• Experience with CI/CD pipelines, security gates, and code quality tools such as GitLab, SonarQube, and Fortify.
• Experience with Splunk ES and SOAR or comparable SIEM and SOAR platforms.
• Experience automating compliance evidence with eMASS and AWS compliance services.

Desired Qualifications

• Python, PowerShell, or Bash scripting.
• AWS GovCloud experience, including Lambda, EventBridge, and Step Functions.
• Understanding of RMF continuous monitoring requirements.
• Experience with SAFe Agile methodology and PI Planning.

Benefits

C5T Corporation offers a competitive benefits package designed to support employees and their families, including:

• Competitive compensation.
• Medical, dental, and vision insurance options.
• 401(k) retirement plan with company match.
• Flexible Spending Account (FSA).
• Supplemental insurance options, including accident, critical illness, and hospital indemnity coverage.
• Company-paid life insurance.
• Employee Assistance Program (EAP).
• 10 paid holidays annually.
• Responsible Paid Time Off (RPTO), providing flexible vacation and personal leave aligned with mission requirements.
• Opportunities for professional development and career growth.

Equal Employment Opportunity

C5T Corporation is a merit-based employer committed to equal employment opportunity, affirmative action, and nondiscrimination for all qualified applicants, including individuals with disabilities and protected veterans, in accordance with applicable federal requirements, Section 503, and VEVRAA.

Apply Today

Join a mission-driven team securing a critical defense logistics platform through automation.

Visit www.c5t.com/careers to explore employment opportunities and apply through C5T Corporation's official job board.