Senior Cybersecurity Analyst: DevSecOps & Cloud Security

Trinnex; Great Falls (MT); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the software development lifecycle and protect critical water infrastructure software.

You will lead advanced threat monitoring, incident response, and vulnerability testing while collaborating with engineering teams to remediate threats and strengthen secure coding practices. The role emphasizes DevSecOps and continuous security improvements across cloud-native environments.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• Minimum of 6 years of cybersecurity experience.
• Willingness to travel domestically or internationally as required.

Responsibilities

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead complex incident responses including forensics and root cause analysis.
• Design and execute vulnerability assessments and pen tests across infrastructure and apps.
• Remediate vulnerabilities with IT and software teams and strengthen secure coding.
• Review security controls for compliance with frameworks and lead remediation.
• Research threat actors and develop forward-looking defense strategies.
• Mentor junior analysts and help build team capabilities.
• Support enterprise security strategy aligned with business objectives.

Skills

Analytical skills

Stakeholder communication

Security frameworks

Incident response

Regulatory knowledge

Independent work

Cross-functional collaboration

IaC security

Cloud security

Education

Bachelor’s Degree

6 years of cybersecurity experience

Tools

Mend

Google Cloud Platform (GCP)

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the software development lifecycle and protect critical water infrastructure software.

You will lead advanced threat monitoring, incident response, and vulnerability testing while collaborating with engineering teams to remediate threats and strengthen secure coding practices. The role emphasizes DevSecOps and continuous security improvements across cloud-native environments.