Senior Cybersecurity Analyst — DevSecOps for Water

Trinnex; Columbia (SC); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to join its Security Team, working at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You will embed security controls across the SDLC, lead incident response, conduct vulnerability assessments, and mentor junior analysts while collaborating with IT and development teams to strengthen the organization’s security posture.

Qualifications

• Bachelor’s degree required with 6 years cybersecurity experience; equivalent additional directly related experience considered.
• Travel may be required domestically and internationally depending on duties and project demands.
• Experience with security frameworks, incident response processes, and regulatory environments.

Responsibilities

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead incident response for complex events including forensics and root cause analysis.
• Design and execute vulnerability assessments, penetration tests, and simulated attacks across infrastructure and applications.
• Collaborate with IT and software teams to remediate vulnerabilities and strengthen secure coding in SDLC.
• Review security controls and ensure compliance with regulatory standards; drive remediation efforts.
• Research adversaries and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability.
• Support enterprise security strategies aligned with business objectives.

Skills

Threat detection

Incident response

Vulnerability management

Secure SDLC

IaC security

Cloud security

Kubernetes security

Terraform

Communication

Mentoring

Education

Bachelor’s Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to join its Security Team, working at the intersection of cybersecurity and DevSecOps to protect critical software systems supporting water utilities and infrastructure.

You will embed security controls across the SDLC, lead incident response, conduct vulnerability assessments, and mentor junior analysts while collaborating with IT and development teams to strengthen the organization’s security posture.