Cybersecurity Practitioner

Trinzic (KBR/Trinzic) is seeking a Cybersecurity Practitioner to support cybersecurity engineering across acquisition and sustainment programs. This onsite role is based at Tinker AFB, OK, where you will help evaluate third-party software deliverables, assess IT and OT compliance and risk using the NIST Risk Management Framework (RMF), and contribute to ongoing security verification through engineering-focused testing and monitoring.

The work blends secure software assessment with practical engineering support, including static analysis, reverse engineering, and continuous monitoring artifact development. You will collaborate with a team that evaluates cybersecurity policies and performs risk assessment, authorization, and monitoring to support customer mission success.

What you will do

• Evaluate and verify third-party software deliverables, review technical compliance reports, and provide risk-mitigation recommendations for Information Technology (IT) and Operational Technology (OT) systems.
• Support implementation of the NIST Risk Management Framework (RMF) by assessing, authorizing, and monitoring system risks.
• Perform Static Application Security Testing (SAST) on source code and conduct static binary analysis on compiled executables.
• Analyze scan results to identify software weaknesses, prioritize mitigation plans, and maintain security testing tools.
• Reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects.
• Use DEVSECOPS and secure coding practices to provide technical support that directs system security engineering for acquisition and sustainment programs.
• Develop and maintain custom utilities to gather system information, consolidate logs and Security Content Automation Protocol (SCAP) results, generate visual metrics, and produce Continuous Monitoring (CONMON) artifacts.

Required experience and qualifications

• At least 3 years of experience in software engineering, software development, or a cybersecurity-related field.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six (6) months of the assignment, ability to possess or obtain one of the following certifications: CySA+, CGRC (formerly CAP), Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices.
• Ability to obtain and maintain a Secret or Top-Secret security clearance.

Technologies you may work with

• NIST Risk Management Framework (RMF)
• Static Application Security Testing (SAST)
• SCAP (Security Content Automation Protocol)
• Continuous Monitoring (CONMON)
• DEVSECOPS
• Ghidra, Binwalk
• JTAG, UART, I2C

Preferred qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity, plus 5 years of experience in related engineering or cybersecurity roles.
• Hands-on experience with ICS/SCADA systems, vulnerability hunting, threat analysis, software reverse engineering, Ghidra, Binwalk, and hardware debugging interfaces such as JTAG, UART, and I2C.
• Possession of one of the following certifications: CDP, CDE, CEH, CASE, GREM, or GICSP.
• Direct experience supporting USAF, military service, or military weapon systems.
• Must possess an active Secret or Top-Secret security clearance.