Cyber Security Engineer

Role Overview

• Act as a core member of Trinity’s cyber defense program
• Identify, assess and prioritize threats and vulnerabilities across all of Trinity’s environment
• Effectively communicate across multiple teams to help create a cohesive security ecosystem
• Build strong relationships across the business to help identify gaps in security controls and assist in internal audits
• Promote security throughout the organization

Requirements

• BS in computer sciences or equivalent work experience
• 5+ years of security engineering and vulnerability remediation
• Advanced proficiency with Azure services (Entra ID, Key Vault, Sentinel, Defender for Cloud, Application Gateway, NSGs, Private Endpoints)
• Advanced proficiency with AWS services (IAM, CloudTrail, GuardDuty, Security Hub, VPC, KMS, Secrets Manager)
• Experience with SIEM/logging tools (Splunk, or similar); log analysis and KQL/SPL query writing
• Proficiency with vulnerability management (InsightVM and AppSec or other), endpoint detection & response (SentinelOne EDR or similar), and patch management tools (Automox or similar)
• Strong scripting/automation skills (PowerShell, Python, Bash)
• Knowledge of secure SDLC tools (SAST, DAST, code repositories, CI/CD pipeline security)
• Demonstrated experience with cloud security frameworks (Azure Security Benchmark, AWS Well-Architected Security Pillar, CIS Controls)
• Understanding of modern threats and exploits
• Ability to assist in designing correction plans, mitigations, and full remediation actions
• Ability to understand and communicate attack chains to management and key stakeholders
• Develop, execute and track the performance of security measures to protect information and network infrastructure and computer systems
• Identify, define and document system security requirements and recommend solutions to management
• Configure, troubleshoot, and maintain security infrastructure software and hardware
• Implement software that monitors systems and networks for security breaches and intrusions
• Monitor systems for irregular behavior and set up preventive measures
• Identify and document security requirements and recommend solutions to management
• Knowledge of WAFs and SD-WAN
• Experience with network monitoring and breach monitoring tools
• Cloud experience including Windows and Linux administration and/or engineering
• Understanding of all phases of the Cyber Security kill chain
• Experience with email security and phishing
• Knowledge and experience updating and creating Incident Response Playbooks
• Solid understanding of secure messaging best practices and security training best practices

Tech Stack

• AWS
• Azure
• Cloud
• Cyber Security
• Linux
• Python
• SDLC
• Splunk
• Vault

Benefits

• Annual discretionary performance bonus
• Health insurance
• Professional development opportunities
• Remote work options
• Flexible working hours