Senior Cyber Security Analyst (DevSecOps for Water Infra)

Trinnex; Springfield (MA); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team, working at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You will secure the software development lifecycle by embedding security controls, identifying vulnerabilities, and ensuring cloud-native workflows are resilient against evolving threats.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience considered in lieu of a college degree.

Responsibilities

• Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies; develop custom monitoring rules.
• Lead response efforts for complex incidents (e.g., APTs, data breaches), including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infrastructure and applications.
• Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC.
• Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts.
• Research advanced threat actors and develop forward‑looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support development and execution of enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communication

Security frameworks

Independent work

Collaboration

Innovation in cybersecurity

IaC security

Cloud-native security

Education

Bachelor’s Degree

Tools

GCP

Kubernetes

Terraform

IaC

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team, working at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You will secure the software development lifecycle by embedding security controls, identifying vulnerabilities, and ensuring cloud-native workflows are resilient against evolving threats.