Senior DevSecOps Cybersecurity Analyst

Trinnex; City of Poughkeepsie (NY); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. in the United States is seeking a Senior Cyber Security Analyst to secure the software development lifecycle within water utilities projects. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in cloud-native pipelines.

You will work with engineering teams to monitor threats, conduct incident response, and strengthen secure coding practices across the SDLC, while advancing modern DevSecOps practices and security posture.

Qualifications

• Bachelor’s degree required; equivalent directly related experience considered.
• 6 years of relevant cybersecurity experience.
• Willingness to travel domestically or internationally.

Responsibilities

• Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies.
• Lead response efforts for complex incidents, including forensic analysis and root cause determination.
• Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios.
• Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC.
• Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts.
• Research advanced threat actors and develop forward‑looking threat intelligence and defense strategies.
• Mentor junior analysts and contribute to team capability development.
• Support development and execution of enterprise security strategies aligned with business objectives.

Skills

Security monitoring

Incident response

Vulnerability assessments

Secure SDLC

Threat intelligence

Cross-functional collaboration

IaC security

Cloud security

Education

Bachelor’s Degree

Tools

Mend

Google Cloud Platform (GCP)

Kubernetes

Terraform

Job description

CDM Smith Inc. in the United States is seeking a Senior Cyber Security Analyst to secure the software development lifecycle within water utilities projects. You will embed security controls, identify vulnerabilities, and ensure resilience of applications deployed in cloud-native pipelines.

You will work with engineering teams to monitor threats, conduct incident response, and strengthen secure coding practices across the SDLC, while advancing modern DevSecOps practices and security posture.