Senior Cyber Security Analyst - Water Infra (DevSecOps)

Trinnex; Sioux City (IA); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and embedding security controls across development processes.

You will work with engineering to safeguard cloud-native applications, conduct threat detection, vulnerability management, and implement mature DevSecOps practices to strengthen the organization’s security posture.

Qualifications

• Bachelor’s Degree; 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience considered in lieu of a college degree.
• Domestic and/or international travel may be required; travel frequency contingent on duties.

Responsibilities

• Conduct advanced security monitoring; develop rules to detect threats.
• Lead incident response and forensics for complex security events.
• Design and execute vulnerability assessments and penetration tests across infra and apps.
• Remediate vulnerabilities with IT and Dev teams; strengthen secure coding in SDLC.
• Review security controls; ensure compliance with regulatory frameworks; lead remediation.
• Research threat actors and develop forward-looking defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical skills

Communicating complex concepts

Security frameworks

Independent worker

Cross-functional collaboration

Continuous improvement

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team, focusing on securing the software development lifecycle and embedding security controls across development processes.

You will work with engineering to safeguard cloud-native applications, conduct threat detection, vulnerability management, and implement mature DevSecOps practices to strengthen the organization’s security posture.