Senior Cybersecurity Analyst: DevSecOps for Critical Infra

Trinnex; Montgomery (AL); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team. You will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems for water utilities and infrastructure, embedding security into the SDLC and addressing evolving threats.

You will collaborate with engineering to secure cloud-native applications in GCP, leverage Kubernetes and Terraform, and mentor others while driving modern security practices across the organization.

Qualifications

• Bachelor’s Degree required.
• 6 years of relevant cybersecurity experience.
• Domestic and/or international travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead incident response for complex events including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, pen tests, and simulated attacks.
• Remediate vulnerabilities with IT and development teams; strengthen secure coding in SDLC.
• Review security controls and ensure compliance with frameworks; lead remediation efforts.
• Develop threat intelligence and defense strategies; stay ahead of emerging threats.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security frameworks

Incident response

Cloud security

IaC security

DevSecOps

Threat intelligence

Vulnerability management

Education

Bachelor’s Degree

Tools

GCP

Kubernetes

Terraform

Mend

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team. You will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems for water utilities and infrastructure, embedding security into the SDLC and addressing evolving threats.

You will collaborate with engineering to secure cloud-native applications in GCP, leverage Kubernetes and Terraform, and mentor others while driving modern security practices across the organization.