Senior Cyber Operator

Senior Cyber Operator

Location: Remote

Compensation: $67,832 - $94,212 per year, depending on experience and qualifications. 

Employment Type: Full-Time

What you can expect as the Senior Cyber Operator at Fortress... 
The Senior Cyber Operator serves as a subject matter expert within the vulnerability management program, owning end-to-end execution of the most complex work across an assigned area and acting as the primary liaison to business units. This role is central to ensuring data quality, audit-defensible evidence, and consistent program execution — from remediation validation and risk-acceptance governance to escalation management and client coordination. The position offers direct collaboration with client program staff and the opportunity to mentor junior operators, driving process improvements that strengthen the overall vulnerability management program. It is a compelling opportunity for an experienced cybersecurity professional looking to lead high-impact work, shape team standards, and deepen expertise across vulnerability management platforms and frameworks. 

Responsibilities Include 

• Serve as a subject matter expert on the vulnerability management process and platform, and own end-to-end execution of the most complex work within an assigned area of the program. 
• Act as primary liaison to business units — determining applicability, negotiating remediation timelines and dates, and building the action plans, summary reports, and onboarding packages that commit the work. 
• Own remediation validation and closure: run credentialed cumulative and ad hoc scans, evaluate business-unit evidence against required state, resolve recurring or incomplete-remediation cases, and produce audit-defensible evidence packages for regulatory review (NERC CIP, BCSI). 
• Own escalated and critical-vulnerability remediation through to closure where assigned: map assets to owners, drive ticketing and the defined escalation cadence, and validate against closure thresholds with documented evidence. 
• Govern risk-acceptance and exception cases where assigned: assess requests, frame risk for approval routing, and manage the lifecycle through extension and evidence-based closure. 
• Maintain and improve data quality across vulnerability, asset, and inventory systems, and evaluate source or scanner health for coverage not met by automated tools. 
• Provide guidance and mentoring to associate and intermediate operators, reviewing their work for process adherence and audit quality. 
• Serve as a point of contact for business-unit and client program staff on questions, troubleshooting, and platform support. 
• Drive process-improvement and standardization initiatives, and contribute to documentation, templates, and knowledge-sharing that raise team consistency. 
• Use approved AI-assisted tools to improve the quality and efficiency of research, analysis, and documentation, maintaining oversight of outputs.
• Other duties as assigned.

Minimum Qualifications 

• 3–5 years of experience in a professional environment.
• Proficient in applying cybersecurity frameworks, tools, and best practices. 
• Excellent communication skills. 
• Proficient knowledge of Microsoft Office Suite. 
• Ability to leverage AI tools and independently use and refine prompts to enhance the quality, efficiency, and insight of regular work processes. 

Preferred Skills 

• Cybersecurity related certifications (Network+, Security+, CySA+ or equivalent). 
• Hands-on experience configuring and running credentialed vulnerability scans, and interpreting scan freshness, coverage gaps, and credential failures. 
• Experience producing audit evidence packages for regulatory review (NERC CIP, BCSI) — timestamped, non-editable artifacts held in controlled repositories. 
• Experience negotiating remediation timelines directly with business or asset owners, including extension and risk-acceptance conversations. 
• Familiarity with scanner detection behavior — plugin dependencies, credentialed versus uncredentialed results, and common causes of recurring or intermittent findings. 
• Exposure to operational technology, industrial control system, or other environments where standard scanning and patching cadences cannot be applied as written. 

Education 

• Associate’s degree required. 
• Bachelor's degree preferred. 

Employee Benefits: 

• Remote and Hybrid working environment  
• Competitive pay structure 
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families 
• Company paid life, short- and long-term disability insurance 
• Employee Assistance Program 
• 401(k) match 
• Flexible Paid Time Off
• Parental Leave

Employment Perks: 

• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications 
• Tuition and certification reimbursement  
• Employee Referral Programs 
• Company Sponsored Events 

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.  
 
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.