Senior Cyber Security Analyst - DevSecOps for Critical Infra

Trinnex; BLOOMINGTON (MN); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the software development lifecycle for critical water infrastructure software. You will embed security controls, identify vulnerabilities, and ensure resilient deployments across cloud-native environments.

You will partner with engineering teams to detect threats, perform forensics, and drive secure coding practices while advancing DevSecOps capabilities and regulatory compliance.

Qualifications

• Bachelor’s degree required; 6+ years of cybersecurity experience preferred.
• Proven expertise in threat detection, vulnerability management, and secure SDLC.
• Experience securing cloud-native environments and CI/CD pipelines.

Responsibilities

• Perform advanced security monitoring and analyze complex alerts and anomalies.
• Lead complex incident responses including forensics and root-cause analysis.
• Design and execute vulnerability assessments and penetration tests.
• Remediate vulnerabilities with IT and development teams and improve secure coding practices.
• Review security controls for regulatory compliance and drive remediation.
• Research threat actors and develop proactive defense strategies.
• Mentor junior analysts and support enterprise security initiatives.

Skills

Analytical thinking

Communication

Security frameworks

Incident response

Cloud security

IaC security

Collaboration

Education

Bachelor’s Degree

Tools

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the software development lifecycle for critical water infrastructure software. You will embed security controls, identify vulnerabilities, and ensure resilient deployments across cloud-native environments.

You will partner with engineering teams to detect threats, perform forensics, and drive secure coding practices while advancing DevSecOps capabilities and regulatory compliance.