Senior Cybersecurity Analyst: DevSecOps & SDLC Security

Trinnex; Concord (NH); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, protecting software that supports water utilities and infrastructure.

You will embed security controls across the software development lifecycle, monitor threats, and manage vulnerabilities to ensure resilient deployments. You will collaborate with engineering and IT teams to strengthen secure coding, lead incident response for complex events, perform tests, mentor junior analysts, and advance DevSecOps

Qualifications

• Bachelor’s Degree required.
• 6 years of relevant cybersecurity experience.
• Equivalent additional directly related experience considered in lieu of a degree.

Responsibilities

• Conduct advanced security monitoring and develop custom detection rules.
• Lead incident response for complex events (e.g., APTs, data breaches).
• Design and execute vulnerability assessments and penetration tests.
• Remediate vulnerabilities with IT and development teams; strengthen secure SDLC.
• Review security controls for regulatory compliance and lead remediation.
• Research threat actors and develop forward‑looking threat intelligence.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Analytical thinking

Communication

Security frameworks

Independent work

Cross‑functional collaboration

Innovation mindset

IaC security

Cloud security

Threat detection

Education

Bachelor’s Degree

Tools

Mend for SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to join the Security Team, protecting software that supports water utilities and infrastructure.

You will embed security controls across the software development lifecycle, monitor threats, and manage vulnerabilities to ensure resilient deployments. You will collaborate with engineering and IT teams to strengthen secure coding, lead incident response for complex events, perform tests, mentor junior analysts, and advance DevSecOps