Senior Cyber Security Analyst — Cloud DevSecOps for Critical Infra

Trinnex; Fayetteville (AR); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps, securing the software development lifecycle for critical water infrastructure systems.

You’ll perform advanced threat monitoring, incident response, and vulnerability management, collaborating with engineering and IT to implement secure coding practices and risk-mitigating controls.

Qualifications

• Bachelor’s Degree
• 6 years of relevant cybersecurity experience
• Equivalent additional directly related experience considered; travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom monitoring rules.
• Lead response efforts for complex incidents (e.g., APTs, data breaches) including forensic analysis.
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios.
• Remediate vulnerabilities with IT and software development teams; strengthen secure coding in SDLC.
• Review security controls and regulatory compliance; lead remediation efforts.
• Research advanced threat actors and develop forward-looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Independent work

Cross-functional collaboration

Cybersecurity innovation

IaC security

Cloud-native security

Education

Bachelor's Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps, securing the software development lifecycle for critical water infrastructure systems.

You’ll perform advanced threat monitoring, incident response, and vulnerability management, collaborating with engineering and IT to implement secure coding practices and risk-mitigating controls.