Senior Cybersecurity Analyst DevSecOps for Utilities

Trinnex; Springfield (IL); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect software systems for water utilities and infrastructure. You will secure the SDLC, embed security controls, and lead threat detection across complex environments.

Work with engineering and development teams to safeguard communities, applying threat intel, vulnerability management, and secure DevSecOps practices. This role offers impact, growth, and cross‑functional collaboration opportunities.

Qualifications

• Bachelor’s degree required; 6 years of cybersecurity experience preferred.
• Equivalent additional directly related experience considered in lieu of degree.
• Domestic and/or international travel may be required; travel frequency depends on duties.

Responsibilities

• Monitor security events, analyze complex alerts, and develop detection rules.
• Lead complex incident response, including forensics and root-cause analysis.
• Design and execute vulnerability assessments and penetration tests across infra and apps.
• Remediate vulnerabilities with IT and development teams; strengthen secure coding in SDLC.
• Review security controls and compliance with frameworks; drive remediation.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security analytics

Communication

Regulatory knowledge

Independent work

Cross‑functional collaboration

DevSecOps

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend

Google Cloud Platform (GCP)

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect software systems for water utilities and infrastructure. You will secure the SDLC, embed security controls, and lead threat detection across complex environments.

Work with engineering and development teams to safeguard communities, applying threat intel, vulnerability management, and secure DevSecOps practices. This role offers impact, growth, and cross‑functional collaboration opportunities.