Cybersecurity Practitioner

Trinzic (K /Trinzic) is seeking a Cybersecurity Practitioner to support cybersecurity engineering across acquisition and sustainment programs. This onsite role is based at Tinker AFB, OK
, where you will help evaluate third-party software deliverables, assess IT and OT compliance and risk using the NIST Risk Management Framework (RMF), and contribute to ongoing security verification through engineering-focused testing and monitoring.

The work blends secure software assessment with practical engineering support, including static analysis, reverse engineering, and continuous monitoring artifact development. You will collaborate with a team that evaluates cybersecurity policies and performs risk assessment, authorization, and monitoring to support customer mission success.

• Evaluate and verify third-party software deliverables, review technical compliance reports, and provide risk-mitigation recommendations for Information Technology (IT) and Operational Technology (OT) systems.
• Support implementation of the NIST Risk Management Framework (RMF) by assessing, authorizing, and monitoring system risks.
• Perform Static Application Security Testing (SAST) on source code and conduct static binary analysis on compiled executables.
• Analyze scan results to identify software weaknesses, prioritize mitigation plans, and maintain security testing tools.
• Reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects.
• Use DEVSECOPS and secure coding practices to provide technical support that directs system security engineering for acquisition and sustainment programs.
• Develop and maintain custom utilities to gather system information, consolidate logs and Security Content Automation Protocol (SCAP) results, generate visual metrics, and produce Continuous Monitoring (CONMON) artifacts.

• At least 3 years of experience in software engineering, software development, or a cybersecurity-related field.
• Understanding of legacy and modern programming standards
  , secure coding principles, and risk management methodologies.
• Within six (6) months of the assignment, ability to possess or obtain one of the following certifications:
  CySA+,
  CGRC (formerly CAP),
  Security+,
  CISSP
  , SSCP
  , or CSSLP
  .
• Familiarity with secure coding and cybersecurity practices.
• Ability to obtain and maintain a Secret or Top-Secret security clearance.

• NIST Risk Management Framework (RMF)
• Static Application Security Testing (SAST)
• SCAP (Security Content Automation Protocol)
• Continuous Monitoring (CONMON)
• DEVSECOPS
• Ghidra
  , Binwalk
• JTAG
  , UART
  , I2C

• Bachelor’s degree in Computer Science
  , Computer Engineering
  , Software Engineering
  , or Cybersecurity
  , plus 5 years of experience in related engineering or cybersecurity roles.
• Hands-on experience with ICS/SCADA systems
  , vulnerability hunting, threat analysis, software reverse engineering,
  Ghidra
  , Binwalk
  , and hardware debugging interfaces such as JTAG
  , UART
  , and I2C
  .
• Possession of one of the following certifications:
  CDP
  , CDE
  , CEH
  , CASE
  , GREM
  , or GICSP
  .
• Direct experience supporting USAF
  , military service, or military weapon systems.
• Must possess an active Secret or Top-Secret security clearance.