Senior Cyber Security Analyst - DevSecOps for Infra

Trinnex; Cleveland (OH); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and DevSecOps practices for water infrastructure projects.

You will monitor, detect threats, perform vulnerability assessments, and drive secure coding practices alongside engineering teams. The role emphasizes collaboration across IT and development, mentoring analysts, and aligning security with business objectives while operating in a dynamic, regulatory

Qualifications

• Bachelor’s degree in a related field.
• Minimum 6 years of cybersecurity experience.
• Travel may be required; domestic and/or international travel contingent on duties.

Responsibilities

• Conduct advanced security monitoring and develop custom rules.
• Lead incident response for complex events including forensics.
• Design and execute vulnerability assessments and pen tests.
• Remediate vulnerabilities with development teams and strengthen secure coding.
• Review security controls for regulatory compliance and lead remediation.
• Develop threat intelligence and defense strategies.
• Mentor junior analysts and build team capability.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical thinking

Communication skills

Security frameworks

Independent worker

Cross-functional collaboration

IaC security

Cloud security

Education

Bachelor's Degree

Tools

Mend

Google Cloud Platform

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and DevSecOps practices for water infrastructure projects.

You will monitor, detect threats, perform vulnerability assessments, and drive secure coding practices alongside engineering teams. The role emphasizes collaboration across IT and development, mentoring analysts, and aligning security with business objectives while operating in a dynamic, regulatory