Senior Cyber Sec & DevSecOps Analyst (Cloud-Native)

Trinnex; Town of Middletown (NY); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, protecting critical software that supports water infrastructure. You will embed security controls across the SDLC, lead vulnerability management, and secure cloud-native environments against evolving threats.

You will work with engineering to enforce secure coding practices, conduct advanced threat detection, and mentor junior analysts while advancing enterprise security initiatives.

Qualifications

• Bachelor’s degree in a related field; 6 years of cybersecurity experience.
• Equivalency considered in lieu of degree; travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead response efforts for complex incidents including forensics and root cause analysis.
• Design and execute vulnerability assessments and simulated attacks across infrastructure and apps.
• Remediate vulnerabilities with IT and software development teams; strengthen secure coding in SDLC.
• Review security controls for regulatory compliance and drive remediation efforts.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Incident response

Threat detection

IaC security

Cloud security

Cross-functional teamwork

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

CI/CD security

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, protecting critical software that supports water infrastructure. You will embed security controls across the SDLC, lead vulnerability management, and secure cloud-native environments against evolving threats.

You will work with engineering to enforce secure coding practices, conduct advanced threat detection, and mentor junior analysts while advancing enterprise security initiatives.