Senior Cybersecurity Analyst: DevSecOps for Water Systems

Trinnex; Warren (MI); Presencial; USD 102.000 - 179.000; Jornada completa

Descripción de la vacante

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the SDLC and protect critical water infrastructure software by embedding security controls and managing vulnerabilities. You’ll work with engineering to ensure resilient cloud-native applications across GCP and Kubernetes ecosystems.

You will lead complex incident response, perform advanced threat detection, and drive secure coding practices in DevSecOps. Travel may be required based on project needs and client requirements.

Formación

• Bachelor’s Degree required; experience will be considered in lieu of the degree.
• 6 years of cybersecurity experience or equivalent.
• Willingness to travel domestically or internationally as needed.

Responsabilidades

• Conduct advanced security monitoring and develop custom rules to detect threats.
• Lead incident response for complex events including forensics and root-cause analysis.
• Design and execute vulnerability assessments and pen tests across infra and apps.
• Partner with IT and development teams to remediate vulnerabilities in the SDLC.
• Review security controls for regulatory compliance and drive remediation.
• Research threat actors and develop forward-looking threat intelligence.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategy aligned with business objectives.

Conocimientos

Analytical skills

Communication

Security frameworks

Independent work

Cross-functional

Collaboration

Security innovation

IaC security

Cloud-native security

Educación

Bachelor’s Degree

6 years of cybersecurity experience

Herramientas

Mend

GCP

Kubernetes

Terraform

Descripción del empleo

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to secure the SDLC and protect critical water infrastructure software by embedding security controls and managing vulnerabilities. You’ll work with engineering to ensure resilient cloud-native applications across GCP and Kubernetes ecosystems.

You will lead complex incident response, perform advanced threat detection, and drive secure coding practices in DevSecOps. Travel may be required based on project needs and client requirements.