Senior Cyber Security Analyst — DevSecOps Lead

Trinnex; Charlotte (NC); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps, embedding security into the software development lifecycle for critical water utilities and infrastructure.

You will lead advanced threat detection, vulnerability management, and secure coding practices, collaborating with engineering to strengthen the organization's security posture and resilience against evolving threats.

Qualifications

• Bachelor’s degree or equivalent; 6+ years in cybersecurity roles.
• Experience securing SDLC, threat modeling, and securing DevOps.
• Strong knowledge of security frameworks, incident response processes, and regulatory contexts.

Responsibilities

• Conduct advanced security monitoring and analysis of alerts and traffic anomalies.
• Lead incident response for complex threats, including root-cause analysis.
• Design and execute vulnerability assessments, pen tests, and simulated attacks across infra and apps.
• Collaborate with IT and software teams to remediate vulnerabilities and improve secure coding in SDLC.
• Review security controls and ensure compliance with regulatory frameworks; drive remediation.
• Research threat actors and develop proactive threat intelligence and defense strategies.
• Mentor junior analysts and support security capability development.
• Contribute to enterprise security strategy alignment with business goals.

Skills

Security analytics

Incident response

DevSecOps

IaC security

Cloud security

GCP

Kubernetes security

Cross-functional

Education

Bachelor’s Degree

Tools

Terraform

Kubernetes

Git

CI/CD tooling

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps, embedding security into the software development lifecycle for critical water utilities and infrastructure.

You will lead advanced threat detection, vulnerability management, and secure coding practices, collaborating with engineering to strengthen the organization's security posture and resilience against evolving threats.