Senior Cybersecurity Analyst: DevSecOps for Water Infra

Trinnex; Watertown (SD); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure software systems supporting critical infrastructure. You will focus on the secure development lifecycle, embed security controls, and manage threats across SDLC and cloud environments.

You will work with engineering and IT teams to implement advanced threat detection, vulnerability management, and secure DevSecOps practices, strengthening the organization’s overall security posture and resilience.

Qualifications

• Bachelor’s degree in a cybersecurity field and 6+ years of relevant experience.
• Equivalent additional directly related experience considered in lieu of a degree; travel may be required.

Responsibilities

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead incident response for complex events including forensic analysis.
• Design and execute vulnerability assessments and penetration tests.
• Remediate vulnerabilities with IT and development teams and strengthen secure coding practices.
• Review security controls and ensure compliance with regulatory frameworks; drive remediation.
• Research threat actors and develop forward-looking defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security monitoring

Incident response

Threat intelligence

Cloud security

IaC security

DevSecOps

Communication

Regulatory awareness

Education

Bachelor’s Degree

Tools

Mend

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure software systems supporting critical infrastructure. You will focus on the secure development lifecycle, embed security controls, and manage threats across SDLC and cloud environments.

You will work with engineering and IT teams to implement advanced threat detection, vulnerability management, and secure DevSecOps practices, strengthening the organization’s overall security posture and resilience.