Senior Cyber Security Analyst - DevSecOps for Water Infra

Trinnex; Clarksville (TN); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith seeks a Senior Cyber Security Analyst to join the Security Team and protect critical software systems supporting water utilities and infrastructure. You will embed security controls in the SDLC, lead incident response, conduct vulnerability assessments, and advance DevSecOps practices across cloud and on‑prem deployments.

Collaborate with engineering to implement secure coding, threat intelligence, and governance, risk, and compliance activities to strengthen the organization’s

Qualifications

• Bachelor’s degree required in a related field.
• Minimum 6 years of cybersecurity experience.
• Willingness to travel domestically or internationally.

Responsibilities

• Conduct advanced security monitoring, analyzing alerts and anomalies; create custom rules.
• Lead incident response for complex events, including forensics and root cause analysis.
• Plan and execute vulnerability assessments and penetration tests across infrastructure and apps.
• Remediate vulnerabilities with IT and software teams to improve secure coding in SDLC.
• Develop threat intelligence and defense strategies aligned to business goals.
• Mentor junior analysts and support enterprise security initiatives.

Skills

Security frameworks

Incident response

Regulatory environments

Communication to non-technical

Cross-functional collaboration

Infrastructure as Code

Cloud-native security

Secure SDLC

Education

Bachelor’s Degree

Tools

Terraform

Kubernetes

GCP

Mend

Job description

CDM Smith seeks a Senior Cyber Security Analyst to join the Security Team and protect critical software systems supporting water utilities and infrastructure. You will embed security controls in the SDLC, lead incident response, conduct vulnerability assessments, and advance DevSecOps practices across cloud and on‑prem deployments.

Collaborate with engineering to implement secure coding, threat intelligence, and governance, risk, and compliance activities to strengthen the organization’s