Cybersecurity Practitioner

Cybersecurity Jobs; Oklahoma City (OK); On-site; USD 90,000 - 120,000; Full time

Job summary

Trinzic (KBR/Trinzic) seeks a Cybersecurity Practitioner to support RMF-based engineering across acquisition and sustainment programs at Tinker AFB, OK. You will evaluate third-party software, perform SAST, and develop CONMON artifacts to monitor security postures.

You will work with a team focusing on risk assessment, authorization, and monitoring to protect critical IT/OT systems and ensure mission success.

Qualifications

• 3+ years of experience in software engineering, software development, or cybersecurity.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six months of assignment, ability to possess or obtain one of the following certifications: CySA+, CGRC, Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices.
• Ability to obtain and maintain a Secret or Top-Secret security clearance.

Responsibilities

• Evaluate and verify third-party software deliverables, review technical compliance reports, and provide risk-mitigation recommendations for IT and OT systems.
• Support implementation of the NIST RMF by assessing, authorizing, and monitoring system risks.
• Perform SAST on source code and conduct static binary analysis on compiled executables.
• Analyze scan results to identify software weaknesses, prioritize mitigation plans, and maintain security testing tools.
• Reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects.
• Use DEVSECOPS and secure coding practices to provide technical support that directs system security engineering for acquisition and sustainment programs.
• Develop and maintain custom utilities to gather system information, consolidate logs and SCAP results, generate visual metrics, and produce CONMON artifacts.

Skills

3 years experience

Programming standards

Secure coding

Risk management

Security clearance

Education

Bachelor's degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity

Tools

Ghidra

Binwalk

JTAG

UART

I2C

Job description

Trinzic (KBR/Trinzic) is seeking a Cybersecurity Practitioner to support cybersecurity engineering across acquisition and sustainment programs. This onsite role is based at Tinker AFB, OK, where you will help evaluate third-party software deliverables, assess IT and OT compliance and risk using the NIST Risk Management Framework (RMF), and contribute to ongoing security verification through engineering-focused testing and monitoring.

The work blends secure software assessment with practical engineering support, including static analysis, reverse engineering, and continuous monitoring artifact development. You will collaborate with a team that evaluates cybersecurity policies and performs risk assessment, authorization, and monitoring to support customer mission success.

What you will do

• Evaluate and verify third-party software deliverables, review technical compliance reports, and provide risk-mitigation recommendations for Information Technology (IT) and Operational Technology (OT) systems.
• Support implementation of the NIST Risk Management Framework (RMF) by assessing, authorizing, and monitoring system risks.
• Perform Static Application Security Testing (SAST) on source code and conduct static binary analysis on compiled executables.
• Analyze scan results to identify software weaknesses, prioritize mitigation plans, and maintain security testing tools.
• Reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects.
• Use DEVSECOPS and secure coding practices to provide technical support that directs system security engineering for acquisition and sustainment programs.
• Develop and maintain custom utilities to gather system information, consolidate logs and Security Content Automation Protocol (SCAP) results, generate visual metrics, and produce Continuous Monitoring (CONMON) artifacts.

Required experience and qualifications

• At least 3 years of experience in software engineering, software development, or a cybersecurity-related field.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six (6) months of the assignment, ability to possess or obtain one of the following certifications: CySA+, CGRC (formerly CAP), Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices.
• Ability to obtain and maintain a Secret or Top-Secret security clearance.

Technologies you may work with

• NIST Risk Management Framework (RMF)
• Static Application Security Testing (SAST)
• SCAP (Security Content Automation Protocol)
• Continuous Monitoring (CONMON)
• DEVSECOPS
• Ghidra, Binwalk
• JTAG, UART, I2C

Preferred qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity, plus 5 years of experience in related engineering or cybersecurity roles.
• Hands-on experience with ICS/SCADA systems, vulnerability hunting, threat analysis, software reverse engineering, Ghidra, Binwalk, and hardware debugging interfaces such as JTAG, UART, and I2C.
• Possession of one of the following certifications: CDP, CDE, CEH, CASE, GREM, or GICSP.
• Direct experience supporting USAF, military service, or military weapon systems.
• Must possess an active Secret or Top-Secret security clearance.