Senior Cyber Security Analyst - DevSecOps for Water Systems

Trinnex; Walnut Creek (CA); On-site; USD 102,000 - 179,000; Full time

Job summary

Trinnex is seeking a Senior Cyber Security Analyst to join the Security Team in Walnut Creek, CA. You will secure the software development lifecycle, embed security controls, and protect water-utility software systems from evolving threats.

You will apply threat detection, vulnerability management, and secure development practices while collaborating with engineering to strengthen security posture across the organization.

Qualifications

• Bachelor’s Degree required.
• 6 years of relevant cybersecurity experience preferred.
• Equivalent additional directly related experience considered in lieu of degree.

Responsibilities

• Conduct advanced security monitoring and analyze complex alerts and traffic anomalies.
• Lead response efforts for complex incidents including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infra and apps.
• Remediate vulnerabilities with IT and software development teams and strengthen secure coding in SDLC.
• Review security controls and ensure compliance with regulatory frameworks; lead remediation efforts.
• Research advanced threat actors and develop forward-looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Cross-functional

IaC security

Cloud security

Threat detection

Incident response

Education

Bachelor’s Degree

Tools

Kubernetes

Terraform

Job description

Trinnex is seeking a Senior Cyber Security Analyst to join the Security Team in Walnut Creek, CA. You will secure the software development lifecycle, embed security controls, and protect water-utility software systems from evolving threats.

You will apply threat detection, vulnerability management, and secure development practices while collaborating with engineering to strengthen security posture across the organization.