Senior Cyber Security Analyst

Trinnex develops digital technology solutions for managing and protecting water resources and infrastructure. The Senior Cyber Security Analyst will secure critical software systems by embedding security controls throughout the software development lifecycle, detecting and responding to threats, managing vulnerabilities, and advancing DevSecOps practices.

Responsibilities:

• Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies; develop custom monitoring rules to detect emerging threats
• Lead response efforts for complex incidents (e.g., APTs, data breaches), including forensic analysis and root cause determination
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infrastructure and applications
• Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC
• Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts
• Research advanced threat actors and develop forward-looking threat intelligence and defense strategies
• Mentor junior analysts and contribute to team capability development
• Support development and execution of enterprise security strategies aligned with business objectives

Requirements:

• Strong analytical, problem-solving, and critical-thinking skills
• Proven ability to communicate complex technical concepts to non-technical stakeholders
• Deep understanding of security frameworks, incident response processes, and regulatory environments
• Demonstrated ability to work independently and cross-functionally in a dynamic environment
• Strong collaboration skills with both infrastructure and software engineering teams
• Passion for innovation and continuous improvement in cybersecurity practices
• Strong skills with Infrastructure as Code (IaC) as it relates to securing the software development life cycle
• Demonstrated ability to secure cloud-native workflows
• Bachelor's Degree
• 6 years of relevant cybersecurity experience
• Equivalent additional directly related experience will be considered in lieu of a college degree
• Domestic and/or international travel may be required
• Hands-on experience with Mend for software composition analysis (SCA), open-source risk management, and vulnerability remediation
• Experience working within Google Cloud Platform (GCP) and Kubernetes including securing cloud-native applications, infrastructure, and CI/CD pipelines
• Experience with Terraform and other IaC, including automated provisioning, configuration management, and security of cloud infrastructure and deployment pipelines