Senior Cybersecurity Analyst: DevSecOps for Critical Infra

Trinnex; Grand Forks (ND); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. in the United States seeks a Senior Cyber Security Analyst to secure SDLC, embed security controls, and safeguard critical water and infrastructure software.

You will lead threat detection, vulnerability management, and secure development practices across DevSecOps, working with engineering and IT teams. Responsibilities include monitoring for advanced threats, leading incident response, designing tests, auditing controls for regulatory compliance, and mentoring junior staff.

Qualifications

• Bachelor’s Degree in a relevant field.
• 6 years of cybersecurity experience.

Responsibilities

• Conduct advanced security monitoring and analyze alerts; develop rules to detect threats.
• Lead response efforts for complex incidents and perform forensics/root cause analysis.
• Design and execute vulnerability assessments and simulated attacks across infra and apps.
• Remediate vulnerabilities with IT/dev teams; strengthen secure coding in SDLC.
• Review security controls and ensure compliance with regulatory frameworks; drive remediation.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security analytics

Threat detection

Incident response

Regulatory compliance

Communication skills

IaC security

Cloud security

Team mentoring

Education

Bachelor’s Degree

Tools

Mend

Google Cloud Platform

Kubernetes

Terraform

CI/CD security

Job description

CDM Smith Inc. in the United States seeks a Senior Cyber Security Analyst to secure SDLC, embed security controls, and safeguard critical water and infrastructure software.

You will lead threat detection, vulnerability management, and secure development practices across DevSecOps, working with engineering and IT teams. Responsibilities include monitoring for advanced threats, leading incident response, designing tests, auditing controls for regulatory compliance, and mentoring junior staff.