Senior Cyber Security Analyst

Job Description

Join the Trinnex Security Team as a Senior Cyber Security Analyst, where you will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems that support water utilities and infrastructure. In this role, you’ll focus on securing the software development lifecycle—embedding security controls, identifying vulnerabilities, and ensuring that applications deployed in water environments are resilient against evolving threats. You will work closely with engineering and development teams to safeguard systems that communities depend on, applying advanced threat detection, vulnerability management, and secure development practices.

Responsibilities

• Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies; develop custom monitoring rules to detect emerging threats.
• Lead response efforts for complex incidents (e.g., APTs, data breaches), including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infrastructure and applications.
• Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC.
• Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts.
• Research advanced threat actors and develop forward-looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support development and execution of enterprise security strategies aligned with business objectives.

Requirements

• Minimum Qualifications:
• Bachelor’s Degree
• 6 years of relevant cybersecurity experience
• Skills and Abilities:
• Strong analytical, problem-solving, and critical-thinking skills
• Proven ability to communicate complex technical concepts to non-technical stakeholders
• Deep understanding of security frameworks, incident response processes, and regulatory environments
• Demonstrated ability to work independently and cross-functionally in a dynamic environment
• Strong collaboration skills with both infrastructure and software engineering teams
• Passion for innovation and continuous improvement in cybersecurity practices
• Preferred Qualifications:
• Hands-on experience with Mend for software composition analysis (SCA), open-source risk management, and vulnerability remediation
• Experience working within Google Cloud Platform (GCP), including securing cloud-native applications, infrastructure, and CI/CD pipelines

Skills and Abilities

• Strong analytical, problem-solving, and critical-thinking skills
• Proven ability to communicate complex technical concepts to non-technical stakeholders
• Deep understanding of security frameworks, incident response processes, and regulatory environments
• Demonstrated ability to work independently and cross-functionally in a dynamic environment
• Strong collaboration skills with both infrastructure and software engineering teams
• Passion for innovation and continuous improvement in cybersecurity practices