DevSecOps for Critical Water Systems - Senior Cyber Analyst

Trinnex; Durham (NC); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst in the United States to operate at the intersection of cybersecurity and DevSecOps. The role focuses on securing the software development lifecycle, embedding security controls, identifying vulnerabilities, and ensuring resilient applications for critical infrastructure.

You will work with engineering teams to safeguard water-related software systems, apply threat detection, vulnerability management, and secure development practices while

Qualifications

• Bachelor’s degree or higher in a relevant field.
• 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience considered in lieu of a degree.
• Domestic and/or international travel may be required.
• Experience with cloud-native security and CI/CD pipelines.

Responsibilities

• Monitor advanced security events and develop custom detection rules.
• Lead incident response for complex events including forensic analysis.
• Design and execute vulnerability assessments and pentests.
• Remediate vulnerabilities with development teams and strengthen secure coding.
• Review controls for regulatory compliance and drive remediation.
• Develop threat intelligence and defense strategies.
• Mentor junior analysts and build team capability.
• Align security strategy with business objectives across the enterprise.

Skills

Analytical thinking

Communication

Security frameworks

Independent work

Cross-functional collaboration

DevSecOps

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst in the United States to operate at the intersection of cybersecurity and DevSecOps. The role focuses on securing the software development lifecycle, embedding security controls, identifying vulnerabilities, and ensuring resilient applications for critical infrastructure.

You will work with engineering teams to safeguard water-related software systems, apply threat detection, vulnerability management, and secure development practices while