Senior Cybersecurity Analyst - DevSecOps & Threat Defense

Trinnex; Pawtucket (RI); On-site; USD 102,000 - 179,000; Full time

Job summary

Trinnex is seeking a Senior Cyber Security Analyst to join its Security Team, focusing on secure software development lifecycle practices across water-tech software. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in cloud and on-prem environments.

You will work with engineering teams to monitor, detect, and respond to threats, while advancing DevSecOps practices and strengthening overall security posture for critical systems in public

Qualifications

• Bachelor’s Degree required and 6+ years of cybersecurity experience.
• Equivalent experience may substitute for degree; travel frequency varies.

Responsibilities

• Conduct advanced security monitoring and develop rules to detect threats.
• Lead incident response for complex events including forensics and root-cause analysis.
• Design and execute vulnerability assessments, pen tests, and simulated attacks.
• Remediate vulnerabilities with IT and development teams and strengthen secure coding in SDLC.
• Review security controls for regulatory compliance and lead remediation.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Independent work

Collaboration

Innovation

IaC security

Cloud-native security

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

Trinnex is seeking a Senior Cyber Security Analyst to join its Security Team, focusing on secure software development lifecycle practices across water-tech software. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in cloud and on-prem environments.

You will work with engineering teams to monitor, detect, and respond to threats, while advancing DevSecOps practices and strengthening overall security posture for critical systems in public