Senior Cyber Security Analyst - DevSecOps for Systems

Trinnex; Cranston (RI); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure software systems supporting critical water infrastructure. The role focuses on embedding security in the SDLC, threat detection, vulnerability management, and resilient cloud-native workflows.

You will collaborate with engineering teams to implement secure coding, conduct advanced monitoring, and lead incident response. The position emphasizes mentorship and shaping enterprise security strategy.

Qualifications

• Bachelor’s degree or equivalent directly related experience required.
• 6 years of relevant cybersecurity experience or equivalent.
• Experience with DevSecOps practices and secure SDLC preferred.

Responsibilities

• Monitor advanced security across the SDLC and embed security controls.
• Lead incident response for complex security events including forensics and root cause analysis.
• Design and execute vulnerability assessments and penetration tests across infra and apps.
• Partner with IT and software teams to remediate vulnerabilities and strengthen secure coding practices.
• Review security controls for regulatory compliance and lead remediation efforts.
• Research threat actors and develop forward-looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support development of enterprise security strategies aligned with business objectives.

Skills

Threat detection

Vulnerability management

DevSecOps

IaC security

Cloud security

Incident response

Communication

Cross-functional collaboration

Forensics

Education

Bachelor’s Degree

Tools

GCP

Kubernetes

Terraform

Mend (SCA)

IaC tooling

CI/CD security

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure software systems supporting critical water infrastructure. The role focuses on embedding security in the SDLC, threat detection, vulnerability management, and resilient cloud-native workflows.

You will collaborate with engineering teams to implement secure coding, conduct advanced monitoring, and lead incident response. The position emphasizes mentorship and shaping enterprise security strategy.