Senior Cyber Operator

Location: Remote

Compensation: $67,832 - $94,212 per year, depending on experience and qualifications.

Employment Type: Full-Time

What you can expect as the Senior Cyber Operator at Fortress...

• Serve as a subject matter expert on the vulnerability management process and platform, and own end-to-end execution of the most complex work within an assigned area of the program.
• Act as primary liaison to business units — determining applicability, negotiating remediation timelines and dates, and building the action plans, summary reports, and onboarding packages that commit the work.
• Own remediation validation and closure: run credentialed cumulative and ad hoc scans, evaluate business-unit evidence against required state, resolve recurring or incomplete-remediation cases, and produce audit-defensible evidence packages for regulatory review (NERC CIP, BCSI).
• Own escalated and critical-vulnerability remediation through to closure where assigned: map assets to owners, drive ticketing and the defined escalation cadence, and validate against closure thresholds with documented evidence.
• Govern risk-acceptance and exception cases where assigned: assess requests, frame risk for approval routing, and manage the lifecycle through extension and evidence-based closure.
• Maintain and improve data quality across vulnerability, asset, and inventory systems, and evaluate source or scanner health for coverage not met by automated tools.
• Provide guidance and mentoring to associate and intermediate operators, reviewing their work for process adherence and audit quality.
• Serve as a point of contact for business-unit and client program staff on questions, troubleshooting, and platform support.
• Drive process-improvement and standardization initiatives, and contribute to documentation, templates, and knowledge-sharing that raise team consistency.
• Use approved AI-assisted tools to improve the quality and efficiency of research, analysis, and documentation, maintaining oversight of outputs.
• Other duties as assigned.

• 5–7 years of experience in a professional environment.
• Proficient in applying cybersecurity frameworks, tools, and best practices.
• Excellent communication skills.
• Proficient knowledge of Microsoft Office Suite.
• Ability to leverage AI tools and independently use and refine prompts to enhance the quality, efficiency, and insight of regular work processes.

• Cybersecurity related certifications (Network+, Security+, CySA+ or equivalent).
• Hands-on experience configuring and running credentialed vulnerability scans, and interpreting scan freshness, coverage gaps, and credential failures.
• Experience producing audit evidence packages for regulatory review (NERC CIP, BCSI) — timestamped, non-editable artifacts held in controlled repositories.
• Experience negotiating remediation timelines directly with business or asset owners, including extension and risk-acceptance conversations.
• Familiarity with scanner detection behavior — plugin dependencies, credentialed versus uncredentialed results, and common causes of recurring or intermittent findings.
• Exposure to operational technology, industrial control system, or other environments where standard scanning and patching cadences cannot be applied as written.

• Associate’s degree required.
• Bachelor's degree preferred.

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

• We provide each employee with professional growth…