Senior Cyber Security Analyst, DevSecOps for Water Infra

Trinnex; Brookings (SD); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect critical software systems used by water utilities and infrastructure. You will secure the software development lifecycle, embed security controls, identify vulnerabilities, and ensure resilience against evolving threats.

You will collaborate with engineering teams on threat detection, vulnerability management, and secure coding practices, strengthening the organization’s overall security posture and DevSecOps maturity.

Qualifications

• Bachelor’s degree required with 6+ years in cybersecurity.
• Experience across security monitoring, incident response, and threat detection.
• Familiarity with cloud-native architectures and secure SDLC practices.
• Knowledge of regulatory environments and security frameworks.

Responsibilities

• Conduct advanced security monitoring and develop rules for threat detection.
• Lead complex incident response including forensics and root-cause analysis.
• Design and run vulnerability assessments, pen tests, and simulated attacks.
• Remediate vulnerabilities with IT and software teams and strengthen secure coding.
• Oversee reviews of security controls and compliance; drive remediation.
• Research threat actors and develop defense strategies and intelligence.
• Mentor junior analysts and build team capability.
• Align security initiatives with enterprise security strategy across projects.

Skills

Analytical skills

Communication

Security frameworks

Independent work

Cross-functional collaboration

Innovation in cybersecurity

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect critical software systems used by water utilities and infrastructure. You will secure the software development lifecycle, embed security controls, identify vulnerabilities, and ensure resilience against evolving threats.

You will collaborate with engineering teams on threat detection, vulnerability management, and secure coding practices, strengthening the organization’s overall security posture and DevSecOps maturity.