Senior Cyber Sec Analyst | DevSecOps for Water Systems

Trinnex; Gulfport (MS); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to secure software systems supporting critical water infrastructure. You will operate at the intersection of cybersecurity and DevSecOps, embedding security controls in the SDLC and protecting applications deployed in water environments.

You will work with engineering teams to monitor threats, conduct vulnerability assessments, lead incident response, and strengthen secure coding practices across cloud-native environments.

Qualifications

• Bachelor’s degree and 6+ years of cybersecurity experience.
• Experience with incident response, threat detection, vulnerability management.
• Ability to work with DevSecOps, secure SDLC, and cloud-native security.
• Familiarity with regulatory environments and audits.

Responsibilities

• Conduct advanced security monitoring and develop custom rules.
• Lead incident response for complex events including forensics.
• Design and execute vulnerability assessments and pen tests.
• Remediate vulnerabilities with IT and development teams.
• Review security controls and ensure regulatory compliance.
• Develop threat intelligence and defense strategies.
• Mentor junior analysts and support security strategy execution.
• Collaborate across Infrastructure and Software Engineering teams.

Skills

Analytical thinking

Communication skills

Incident response

Threat detection

Vulnerability management

Security frameworks

DevSecOps collaboration

Cloud security

IaC security

Secure SDLC

Education

Bachelor’s Degree

Tools

GCP

Kubernetes

Terraform

Mend SCA

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to secure software systems supporting critical water infrastructure. You will operate at the intersection of cybersecurity and DevSecOps, embedding security controls in the SDLC and protecting applications deployed in water environments.

You will work with engineering teams to monitor threats, conduct vulnerability assessments, lead incident response, and strengthen secure coding practices across cloud-native environments.