Senior DevSecOps Cybersecurity Analyst for Water Systems

Trinnex; Rutland (VT); On-site; USD 102,000 - 179,000; Full time

Job summary

Trinnex in Rutland, VT is seeking a Senior Cyber Security Analyst to join the Security Team. You will secure software in water-sector environments, embed security into the SDLC, and lead threat monitoring and incident response.

The role emphasizes advanced vulnerability management, IaC security with Terraform and Kubernetes on GCP, and collaboration with engineering to reduce risk across cloud-native apps.

Qualifications

• Bachelor's Degree or equivalent directly related experience.
• 6 years of relevant cybersecurity experience.
• Travel frequency may vary depending on duties and project demands.

Responsibilities

• Conduct advanced security monitoring and develop rules to detect emerging threats.
• Lead complex incident response efforts including forensics and root cause analysis.
• Design and execute vulnerability assessments, pen tests and simulated attack scenarios.
• Remediate vulnerabilities with IT and software development teams, strengthening SDLC security.
• Review security controls for regulatory compliance and drive remediation.
• Research advanced threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Threat monitoring

Incident response

Threat intelligence

Cloud security

IaC security

DevSecOps

Vulnerability management

Penetration testing

Education

Bachelor's Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

Trinnex in Rutland, VT is seeking a Senior Cyber Security Analyst to join the Security Team. You will secure software in water-sector environments, embed security into the SDLC, and lead threat monitoring and incident response.

The role emphasizes advanced vulnerability management, IaC security with Terraform and Kubernetes on GCP, and collaboration with engineering to reduce risk across cloud-native apps.