Senior Cybersecurity Analyst: DevSecOps for Critical Infra

Trinnex; Baton Rouge (LA); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You’ll embed security controls across the software development lifecycle, conduct threat detection, vulnerability management, and secure coding practices, collaborating with IT and development teams to strengthen the security posture.

Qualifications

• Bachelor’s Degree required.
• 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience will be considered in lieu of a college degree.

Responsibilities

• Monitor advanced security events and anomalies; develop custom monitoring rules.
• Lead incident response for complex events (APTs, data breaches) and perform forensics.
• Design and execute vulnerability assessments, pen tests, and simulated attacks.
• Remediate vulnerabilities with IT and development teams; strengthen secure coding practices in SDLC.
• Review security controls for regulatory compliance and drive remediation.
• Research advanced threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security analytics

Communication

Frameworks knowledge

Independent work

Cross-functional collaboration

Innovation

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to join the Security Team in the United States. You will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You’ll embed security controls across the software development lifecycle, conduct threat detection, vulnerability management, and secure coding practices, collaborating with IT and development teams to strengthen the security posture.