Senior Cyber Operator

Fortress Information Security; Florida; On-site; USD 68,000 - 94,000; Full time

Benefits offered by this job

Remote/Hybrid options

Medical, dental, vision plans

Life and disability insurance

401(k) match

Flexible PTO

Parental Leave

Tuition reimbursement

Employee referrals

Job summary

Fortress Information Security is seeking a Senior Cyber Operator to lead vulnerability management initiatives remotely in the United States. The role focuses on end-to-end remediation, asset ownership alignment, and audit-ready evidence packages for regulatory reviews.

You will coordinate with business units, drive remediation timelines, and mentor junior staff while leveraging AI-assisted tools to enhance research, analysis, and documentation quality.

Qualifications

• Experience applying cybersecurity frameworks and best practices.
• Excellent communication skills.
• Proficient with Microsoft Office Suite.
• Ability to use AI tools and refine prompts.

Responsibilities

• Own end-to-end remediation within vulnerability program.
• Liaise with business units to set remediation timelines.
• Validate remediation with evidence for regulatory review (NERC CIP, BCSI).
• Manage escalation and asset ownership mapping.
• Maintain data quality across vulnerability and asset systems.
• Mentor junior operators and provide platform support.
• Support process improvements and documentation.
• Utilize AI-assisted tools to improve research and reporting.

Skills

Cybersecurity frameworks know-how

Communication skills

Microsoft Office proficiency

AI tooling and prompts

Education

Associate's degree

Bachelor's degree

Tools

Vulnerability scanning tools

Audit evidence tools

Job description

Location: Remote

Compensation: $67,832 - $94,212 per year, depending on experience and qualifications.

Employment Type: Full-Time

What you can expect as the Senior Cyber Operator at Fortress...

Responsibilities Include

• Serve as a subject matter expert on the vulnerability management process and platform, and own end-to-end execution of the most complex work within an assigned area of the program.
• Act as primary liaison to business units — determining applicability, negotiating remediation timelines and dates, and building the action plans, summary reports, and onboarding packages that commit the work.
• Own remediation validation and closure: run credentialed cumulative and ad hoc scans, evaluate business-unit evidence against required state, resolve recurring or incomplete-remediation cases, and produce audit-defensible evidence packages for regulatory review (NERC CIP, BCSI).
• Own escalated and critical-vulnerability remediation through to closure where assigned: map assets to owners, drive ticketing and the defined escalation cadence, and validate against closure thresholds with documented evidence.
• Govern risk-acceptance and exception cases where assigned: assess requests, frame risk for approval routing, and manage the lifecycle through extension and evidence-based closure.
• Maintain and improve data quality across vulnerability, asset, and inventory systems, and evaluate source or scanner health for coverage not met by automated tools.
• Provide guidance and mentoring to associate and intermediate operators, reviewing their work for process adherence and audit quality.
• Serve as a point of contact for business-unit and client program staff on questions, troubleshooting, and platform support.
• Drive process-improvement and standardization initiatives, and contribute to documentation, templates, and knowledge-sharing that raise team consistency.
• Use approved AI-assisted tools to improve the quality and efficiency of research, analysis, and documentation, maintaining oversight of outputs.
• Other duties as assigned.

Minimum Qualifications

• 5–7 years of experience in a professional environment.
• Proficient in applying cybersecurity frameworks, tools, and best practices.
• Excellent communication skills.
• Proficient knowledge of Microsoft Office Suite.
• Ability to leverage AI tools and independently use and refine prompts to enhance the quality, efficiency, and insight of regular work processes.

Preferred Skills

• Cybersecurity related certifications (Network+, Security+, CySA+ or equivalent).
• Hands-on experience configuring and running credentialed vulnerability scans, and interpreting scan freshness, coverage gaps, and credential failures.
• Experience producing audit evidence packages for regulatory review (NERC CIP, BCSI) — timestamped, non-editable artifacts held in controlled repositories.
• Experience negotiating remediation timelines directly with business or asset owners, including extension and risk-acceptance conversations.
• Familiarity with scanner detection behavior — plugin dependencies, credentialed versus uncredentialed results, and common causes of recurring or intermittent findings.
• Exposure to operational technology, industrial control system, or other environments where standard scanning and patching cadences cannot be applied as written.

Education

• Associate’s degree required.
• Bachelor's degree preferred.

Employee Benefits:

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

Employment Perks:

• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires. For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.