Senior Cyber Defense Analyst — DevSecOps & Cloud

Trinnex; Casper (WY); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to operate at the intersection of cybersecurity and DevSecOps, protecting software systems that support critical water utilities. You will embed security controls in the SDLC, identify vulnerabilities, and secure applications in cloud-native environments.

The role requires deep knowledge of security frameworks, threat detection, and secure coding practices, with opportunities to mentor peers and influence enterprise security strategy.

Qualifications

• Bachelor's Degree required; 6+ years of cybersecurity experience; equivalent experience considered.
• Domestic and/or international travel may be required; travel frequency depends on duties and project demands.

Responsibilities

• Conduct advanced security monitoring; develop custom rules to detect threats.
• Lead complex incident response incl. forensics and root cause analysis.
• Design and execute vulnerability assessments and simulated attacks across infra and apps.
• Remediate vulnerabilities with IT and Dev teams; strengthen secure coding in SDLC.
• Review security controls; ensure compliance with regulatory frameworks; drive remediation.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategy aligned with business objectives.

Skills

Analytical skills

Communication

Security mindset

IR/DFIR

Cross-functional teamwork

Education

Bachelor's Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to operate at the intersection of cybersecurity and DevSecOps, protecting software systems that support critical water utilities. You will embed security controls in the SDLC, identify vulnerabilities, and secure applications in cloud-native environments.

The role requires deep knowledge of security frameworks, threat detection, and secure coding practices, with opportunities to mentor peers and influence enterprise security strategy.