Senior DevSecOps Cybersecurity Analyst

Trinnex; Essex (VT); On-site; USD 102,000 - 179,000; Full time

Job summary

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect critical software systems supporting water utilities and infrastructure.

You will secure the software development lifecycle, embed security controls, and analyze threats across development teams to ensure resilient applications. You will lead complex incident responses, conduct advanced monitoring, and collaborate with IT and engineering to remediate vulnerabilities while advancing DevSecOps practices and enterprise security

Qualifications

• Bachelor’s Degree in a relevant field.
• 6 years of cybersecurity experience.
• Equivalent additional directly related experience may be considered in lieu of a college degree.
• Domestic and/or international travel may be required.

Responsibilities

• Conduct advanced security monitoring; develop rules to detect threats.
• Lead incident response for complex incidents; perform forensic analysis.
• Design/execute vulnerability assessments and pen tests across infra and apps.
• Collaborate with IT/dev teams to remediate vulnerabilities and improve secure coding in SDLC.
• Review security controls and regulatory compliance; drive remediation.
• Research threat actors; develop threat intelligence and defense strategies.
• Mentor junior analysts and build team capabilities.
• Support enterprise security strategy aligned with business goals.

Skills

Security monitoring

Incident response

Threat intelligence

Vulnerability management

Secure SDLC

Cloud security

IaC security

Communication skills

Mentorship

Education

Bachelor’s Degree

Tools

Mend for SCA

GCP

Kubernetes

Terraform

Job description

CDM Smith Inc. is seeking a Senior Cyber Security Analyst to protect critical software systems supporting water utilities and infrastructure.

You will secure the software development lifecycle, embed security controls, and analyze threats across development teams to ensure resilient applications. You will lead complex incident responses, conduct advanced monitoring, and collaborate with IT and engineering to remediate vulnerabilities while advancing DevSecOps practices and enterprise security