Senior Cybersecurity Analyst - DevSecOps for Water Infra

Trinnex; Frederick (MD); On-site; USD 105,000 - 180,000; Full time

Job summary

Trinnex is seeking a Senior Cyber Security Analyst to secure the software development lifecycle for water-related infrastructure. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in water environments.

You will collaborate with engineering teams on threat detection, incident response, and secure coding practices, strengthening overall security posture and enabling modern DevSecOps across the organization.

Qualifications

• Bachelor’s Degree required.
• 6 years of relevant cybersecurity experience.
• Domestic and/or international travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom detection rules.
• Lead incident response for complex events including forensics and root-cause analysis.
• Perform vulnerability assessments, penetration testing, and simulated attacks across infra and apps.
• Remediate vulnerabilities with IT and software development teams, reinforcing secure SDLC.
• Review security controls and ensure compliance with regulatory frameworks; drive remediation.
• Research advanced threat actors and develop forward-looking defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical thinking

Communication

Security concepts

Threat detection

Incident response

Cross-functional collaboration

IaC security

Education

Bachelor’s Degree

Tools

Mend (SCA)

Google Cloud Platform (GCP)

Kubernetes

Terraform / IaC

Job description

Trinnex is seeking a Senior Cyber Security Analyst to secure the software development lifecycle for water-related infrastructure. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in water environments.

You will collaborate with engineering teams on threat detection, incident response, and secure coding practices, strengthening overall security posture and enabling modern DevSecOps across the organization.