Senior Cyber Security Analyst: DevSecOps for Utilities

Trinnex; Virginia Beach (VA); On-site; USD 102,000 - 179,000; Full time

Job summary

Trinnex is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle, embedding security controls, and threat detection for water-utilities software.

You will work with engineering to secure cloud-native workflows, perform vulnerability management, incident response, and secure DevSecOps practices to strengthen the organization’s security posture.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• Minimum 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience will be considered in lieu of a college degree. Travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom detection rules.
• Lead response for complex incidents including forensics and root cause analysis.
• Design and execute vulnerability assessments and penetration tests across infrastructure and apps.
• Remediate vulnerabilities with IT and dev teams; strengthen secure coding in SDLC.
• Review security controls and align with regulatory frameworks; lead remediation.
• Research advanced threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Incident response

Cross-functional collaboration

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

Trinnex is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle, embedding security controls, and threat detection for water-utilities software.

You will work with engineering to secure cloud-native workflows, perform vulnerability management, incident response, and secure DevSecOps practices to strengthen the organization’s security posture.