Senior Cyber Security Analyst: DevSecOps for Critical Infra

Trinnex; Lancaster (Lancaster County); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and DevSecOps in water utilities projects.

You will embed security controls, identify vulnerabilities, and ensure applications deployed in cloud environments remain resilient against evolving threats while collaborating with engineering and IT teams.

Qualifications

• Bachelor’s degree required.
• 6 years of relevant cybersecurity experience.
• Experience with security frameworks and incident response processes.
• Ability to work cross-functionally with engineering teams.

Responsibilities

• Conduct advanced security monitoring; develop rules to detect threats.
• Lead incident response for complex events including forensics and root-cause analysis.
• Design/execute vulnerability assessments and simulated attacks across infra and apps.
• Remediate vulnerabilities with IT and software teams; strengthen secure coding in SDLC.
• Review security controls and drive remediation aligned with regulatory frameworks.
• Develop threat intelligence and defense strategies; mentor junior staff.
• Support enterprise security strategy aligned with business goals.

Skills

Incident response

Threat detection

Cloud security

IaC security

Secure SDLC

Cross-functional

Strong communication

Security frameworks

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and DevSecOps in water utilities projects.

You will embed security controls, identify vulnerabilities, and ensure applications deployed in cloud environments remain resilient against evolving threats while collaborating with engineering and IT teams.