Senior Cybersecurity Analyst, DevSecOps for Water Systems

Trinnex; Rock Springs (WY); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to safeguard critical software systems supporting water utilities.

You’ll integrate security controls into the development lifecycle, conduct advanced threat monitoring, and guide incident response efforts across cloud-native environments. You will collaborate with engineering teams to remediate vulnerabilities, drive secure coding practices, and strengthen overall security posture.

Qualifications

• Bachelor’s degree required; 6+ years of cybersecurity experience noted in role.
• Strong understanding of security frameworks and incident response processes.
• Experience with cloud-native environments and secure SDLC practices.

Responsibilities

• Conduct advanced security monitoring and develop rules for threat detection.
• Lead complex incident response efforts including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attacks.
• Partner with IT and development teams to remediate vulnerabilities and improve secure coding in SDLC.
• Review security controls for compliance with frameworks and lead remediation as needed.
• Research threat actors and develop threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategy and alignment with business goals.

Skills

Security monitoring

Incident response

Vulnerability assessments

Secure coding practices

IaC security

Cloud security

Threat intelligence

Team mentoring

Regulatory frameworks

Communication to stakeholders

Education

Bachelor’s Degree

Tools

Google Cloud Platform (GCP)

Kubernetes

Terraform

CI/CD pipelines

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to safeguard critical software systems supporting water utilities.

You’ll integrate security controls into the development lifecycle, conduct advanced threat monitoring, and guide incident response efforts across cloud-native environments. You will collaborate with engineering teams to remediate vulnerabilities, drive secure coding practices, and strengthen overall security posture.