Job description

Company Overview If you are passionate about water and technology, Trinnex is the place for you! Trinnex is a visionary company that is transforming the way water resources are managed and protected. By combining cutting-edge digital technologies, such as sensor/IoT data, models, geospatial data, and AI/machine learning, we create innovative, smart, and scalable solutions that make a difference. Whether it's optimizing water supply and demand, detecting leaks and anomalies, or enhancing water quality and resilience, Trinnex delivers value and impact to public sector clients across the country. Job Description Join the Trinnex Security Team as a Senior Cyber Security Analyst, where you will operate at the intersection of cybersecurity and DevSecOps to protect critical software systems that support water utilities and infrastructure. In this role, you’ll focus on securing the software development lifecycle—embedding security controls, identifying vulnerabilities, and ensuring that applications deployed in water environments are resilient against evolving threats. You will work closely with engineering and development teams to safeguard systems that communities depend on, applying advanced threat detection, vulnerability management, and secure development practices. This position offers the opportunity to directly impact the reliability and security of essential services while driving modern DevSecOps practices and strengthening the organization’s overall security posture. • Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies; develop custom monitoring rules to detect emerging threats. • Lead response efforts for complex incidents (e.g., APTs, data breaches), including forensic analysis and root cause determination. • Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infrastructure and applications. • Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC. • Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts. • Research advanced threat actors and develop forward-looking threat intelligence and defense strategies. • Mentor junior analysts and contribute to team capability development. • Support development and execution of enterprise security strategies aligned with business objectives. #LI-DNI Skills & Abilities • Strong analytical, problem-solving, and critical-thinking skills. • Proven ability to communicate complex technical concepts to non-technical stakeholders. • Deep understanding of security frameworks, incident response processes, and regulatory environments. • Demonstrated ability to work independently and cross-functionally in a dynamic environment. • Strong collaboration skills with both infrastructure and software engineering teams. • Passion for innovation and continuous improvement in cybersecurity practices. • Strong skills with Infrastructure as Code (IaC) as it relates to securing the software development life cycle. • Demonstrated ability to secure cloud-native workflows. Qualifications • Bachelor’s Degree • 6 years of relevant cybersecurity experience Equivalent additional directly related experience will be considered in lieu of a college degree. Domestic and/or international travel may be required. The frequency of travel is contingent on specific duties, responsibilities, and the essential functions of the position, which may vary depending on workload and project demands. Preferred Qualifications • Hands-on experience with Mend for software composition analysis (SCA), open-source risk management, and vulnerability remediation • Experience working within Google Cloud Platform (GCP) and Kubernetes including securing cloud-native applications, infrastructure, and CI/CD pipelines • Experience with Terraform and other IaC, including automated provisioning, configuration management, and security of cloud infrastructure and deployment pipelines. Amount of Travel Required No Travel is required EEO Statement We attract the best people in the industry, supporting their efforts to learn and grow. We strive to create a challenging and progressive work environment. We provide career opportunities that span a variety of disciplines and geographic locations, with projects that our employees plan, design, build and operate as diverse as the needs of our clients. CDM Smith Inc. and its divisions and subsidiaries are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, pregnancy related conditions, childbirth and related medical conditions, sexual orientation, gender identity or gender expression), national origin, age, marital status, physical or mental disability, veteran status, citizenship status, genetic information or any other characteristic protected by applicable law. Background Check and Drug Testing Information CDM Smith Inc. and its divisions and subsidiaries (hereafter collectively referred to as “CDM Smith”) reserves the right to require background checks including criminal, employment, education, licensure, etc. as well as credit and motor vehicle when applicable for certain positions. In addition, CDM Smith may conduct drug testing for designated positions. Background checks are conducted after an offer of employment has been made in the United States. The timing of when background checks will be conducted on candidates for positions outside the United States will vary based on country statutory law but in no case, will the background check precede an interview. CDM Smith will conduct interviews of qualified individuals prior to requesting a criminal background check, and no job application submitted prior to such interview shall inquire into an applicant's criminal history. If this position is subject to a background check for any convictions related to its responsibilities and requirements, employment will be contingent upon successful completion of a background investigation including criminal history. Criminal history will not automatically disqualify a candidate. In addition, during employment individuals may be required by CDM Smith or a CDM Smith client to successfully complete additional background checks, including motor vehicle record as well as drug testing. Massachusetts Applicants It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Pay Range Min USD $102,170.00 Pay Range Max USD $178,776.00 Additional Pay Range Information CDM Smith is committed to fair and equitable compensation practices. This pay range is a good faith estimate representative of all experience levels for the geographic location assigned to the position. In addition to geographic location, a candidate’s salary is determined by several other factors including, but not limited to, the role, function and associated responsibilities, relevant work experience, skills, required certifications, and education/training. Additional Compensation All bonuses at CDM Smith are discretionary and may or may not apply to this position. Visa Sponsorship Available No-We will not support sponsorship in the United States, i.e. H-1B or TN Visas for this position Agency Disclaimer All vendors must have a signed CDM Smith Placement Agreement from the CDM Smith Talent Acquisition Manager to receive payment for your placement. Verbal or written commitments from any other member of the CDM Smith Inc. and its divisions and subsidiaries staff will not be considered binding terms. All unsolicited resumes sent to CDM Smith Inc. and its divisions and subsidiaries and any resume submitted to any employee outside of CDM Smith Talent Acquisition Team will be considered property of CDM Smith. CDM Smith Inc. and its divisions and subsidiaries will not be held liable to pay a placement fee.

Requirements

Must-haves

Company Overview
Conduct advanced security monitoring, analyzing complex alerts and traffic anomalies; develop custom monitoring rules to detect emerging threats.
Lead response efforts for complex incidents (e.g., APTs, data breaches), including forensic analysis and root cause determination.
Design and execute vulnerability assessments, penetration tests, and simulated attack scenarios across infrastructure and applications.
Partner with IT and software development teams to remediate vulnerabilities and strengthen secure coding practices within the SDLC.
Perform detailed reviews of security controls and compliance with regulatory and security frameworks; lead remediation efforts.
Research advanced threat actors and develop forward-looking threat intelligence and defense strategies.
Mentor junior analysts and contribute to team capability development.
Support development and execution of enterprise security strategies aligned with business objectives.
Skills & Abilities
Strong analytical, problem-solving, and critical-thinking skills.
Proven ability to communicate complex technical concepts to non-technical stakeholders.
Deep understanding of security frameworks, incident response processes, and regulatory environments.
Demonstrated ability to work independently and cross-functionally in a dynamic environment.
Strong collaboration skills with both infrastructure and software engineering teams.
Passion for innovation and continuous improvement in cybersecurity practices.
Strong skills with Infrastructure as Code (IaC) as it relates to securing the software development life cycle.
Demonstrated ability to secure cloud-native workflows.
Bachelor’s Degree
6 years of relevant cybersecurity experience
Amount of Travel Required

Nice-to-haves

Hands-on experience with Mend for software composition analysis (SCA), open-source risk management, and vulnerability remediation
Experience working within Google Cloud Platform (GCP) and Kubernetes including securing cloud-native applications, infrastructure, and CI/CD pipelines
Experience with Terraform and other IaC, including automated provisioning, configuration management, and security of cloud infrastructure and deployment pipelines.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimachine learninggcpkubernetesci/cd

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Vision