Senior Cyber Security Analyst - DevSecOps for Infra

Trinnex; Newark (DE); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, operating at the intersection of cybersecurity and DevSecOps to protect critical software systems for water utilities and infrastructure.

You will embed security controls across the SDLC, identify vulnerabilities, and ensure resilience against evolving threats. You'll work with engineering to safeguard communities by applying threat detection, vulnerability management, and secure development practices, driving

Qualifications

• Bachelor’s degree required; 6+ years of cybersecurity experience or equivalent.

Responsibilities

• Perform advanced security monitoring; develop rules to detect emerging threats.
• Lead incident response for complex events; perform forensic analysis and root-cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attacks.
• Collaborate with IT and development teams to remediate vulnerabilities in the SDLC.
• Review security controls for regulatory compliance; drive remediation.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategy aligned with business objectives.

Skills

Security monitoring

Incident response

Threat intelligence

Secure SDLC

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend

Google Cloud Platform (GCP)

Kubernetes

Terraform

CI/CD pipelines

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, operating at the intersection of cybersecurity and DevSecOps to protect critical software systems for water utilities and infrastructure.

You will embed security controls across the SDLC, identify vulnerabilities, and ensure resilience against evolving threats. You'll work with engineering to safeguard communities by applying threat detection, vulnerability management, and secure development practices, driving