Senior DevSecOps Cybersecurity Analyst

Trinnex; Charleston (SC); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith is seeking a Senior Cyber Security Analyst to secure software across water utilities and infrastructure, focusing on the software development lifecycle and DevSecOps practices. You will embed security controls, identify vulnerabilities, and ensure resilience against evolving threats in cloud-native environments.

You will work with engineering teams to monitor threats, conduct assessments, and strengthen secure coding practices while mentoring junior staff and aligning security

Qualifications

• Bachelor’s Degree required or equivalent directly related experience.
• 6+ years of relevant cybersecurity experience.
• Willingness to travel as duties require.

Responsibilities

• Conduct advanced security monitoring and threat detection; develop custom monitoring rules.
• Lead incident response for complex events (APTs, data breaches) with forensic analysis.
• Design and execute vulnerability assessments, penetration tests, and simulated attacks.
• Remediate vulnerabilities with IT and software development teams within the SDLC.
• Review security controls and regulatory compliance; lead remediation efforts.
• Develop forward‑looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support enterprise security strategies aligned with business objectives.

Skills

Security frameworks

Incident response

Vulnerability assessment

Threat intelligence

Cloud security

IaC security

DevSecOps

Mentoring

Education

Bachelor’s Degree

Tools

Mend SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith is seeking a Senior Cyber Security Analyst to secure software across water utilities and infrastructure, focusing on the software development lifecycle and DevSecOps practices. You will embed security controls, identify vulnerabilities, and ensure resilience against evolving threats in cloud-native environments.

You will work with engineering teams to monitor threats, conduct assessments, and strengthen secure coding practices while mentoring junior staff and aligning security