The Cyber Data Analyst manages the analytics, reporting, and data-integrity layer of a vulnerability management program to provide trusted metrics for leadership. This role involves designing AI-assisted workflows to detect data defects and building new metrics, algorithms, and dashboards to measure security program performance.
Fortress is building a pipeline of qualified candidates for an upcoming Cyber Data Analyst opening. While this role is not immediately open, we expect to fill it soon and want to connect with strong candidates now so we can move quickly when it does. Thank you for your understanding!
Cyber Data Analyst
Location: Remote Compensation: $55,271 - $62,808 per year, depending on experience and qualifications. Employment Type: Full-Time
What you can expect as the Cyber Data Analyst at Fortress... The Cyber Data Analyst owns the analytics, reporting, and data-integrity layer of a vulnerability management program, transforming raw scan, asset, and remediation data into trusted metrics that leadership and client stakeholders rely on to understand program performance and risk posture. This role pairs hands-on data analysis and modeling with deliberate use of approved AI-assisted tooling to detect and resolve data-quality defects at a scale that manual review cannot reach. It is a build-oriented position where new metrics, algorithms, and dashboards originate, are iterated rapidly with stakeholders, and are transitioned to operating teams once stable. It is a compelling opportunity for an analytically minded professional who wants to shape how a security program measures itself, rather than simply execute against existing measures.
Responsibilities Include:
Own the recurring monthly data-quality reporting cycle: identify, quantify, and trend data-integrity defects across vulnerability, asset, product, and remediation records; report volume, aging, root cause, and downstream operational impact to program leadership on a fixed cadence.
Design, test, and refine AI-assisted workflows, including prompt libraries, structured extraction patterns, and batch review routines, to detect, classify, and correct data-quality defects at scale, maintaining human review and documented validation of all AI-generated output.
Maintain and version the prompt, script, and workflow library supporting AI-assisted data remediation so that methods are reproducible, auditable, and transferable to other analysts and other client programs.
Perform the monthly reconciliation between the business intelligence reporting layer and authoritative scan data from the enterprise vulnerability scanning platform; investigate and resolve record-level variances before publication and document the reconciliation result.
Research and confirm vulnerability and asset ownership following report publication: resolve unassigned, stale, or mis-assigned owners against configuration management and organizational data sources, coordinate corrections with the responsible operating teams, and certify ownership accuracy for the reporting period.
Scope, build, and deliver net-new reporting and ad hoc analytical research at the request of program and client leadership, clarifying the underlying question, identifying available and missing data, and stating the confidence and limitations of the result.
Design and build new metrics, scoring algorithms, and dashboards from scratch, defining the measure, sourcing and modeling the data, validating against known cases, and iterating with stakeholders until the output is trusted and stable.
Transition mature analytics products to the owning operational team once rapid iteration has ended: document the data sources, logic, refresh process, and failure modes; train the receiving team; and provide defined post-transition support.
Partner with operations teams across the vulnerability lifecycle, including identification, disposition, tracking, analysis, exceptions, and asset and configuration management, to trace data defects to their process origin and recommend upstream corrections rather than recurring downstream cleanup.
Produce audit-ready documentation of analytical methods, data lineage, and reporting definitions sufficient for regulatory review and for client questions on how a published number was derived.
Support additional analytical, reporting, and program improvement projects as assigned.
Other duties as assigned.
Minimum Qualifications:
At least 1 year of experience in data analysis, data science, business intelligence, security analytics, IT operations reporting, or a related field. Recent graduates and candidates with relevant internship experience, coursework, or completion of a data analytics or cybersecurity boot camp will also be considered.
Demonstrated ability to work with large, imperfect data sets, joining across sources, identifying duplicates and gaps, and reconciling records between systems that do not agree.
Proficiency building reports and dashboards, including data modeling and calculated measures.
Advanced proficiency with Excel for data comparison and analysis, including lookups, pivot tables, and conditional logic.
Ability to leverage AI tools and independently design, test, and refine prompts to enhance the quality, efficiency, and insight of analytical and data-remediation work, including judgment about when AI output requires human verification.
Familiarity with cybersecurity concepts including vulnerabilities, patching, CVEs, CVSS scoring, and risk fundamentals; formal training or self-study accepted.
Strong written and verbal communication skills, including the ability to explain analytical methods and findings to non-technical and leadership audiences.
Proficiency with Microsoft Office tools including Word, Excel, PowerPoint, Outlook, and SharePoint.
Strong organizational habits with attention to detail, reliable follow-through, and the ability to manage multiple concurrent workstreams against a fixed reporting calendar.
Preferred Skills:
Hands-on exposure to enterprise vulnerability scanning platforms (Tenable, Qualys, Rapid7, or similar), including how scan results, plugin behavior, and credentialed coverage affect data reliability.
Experience with enterprise ITSM or ticketing platforms (ServiceNow, Jira, or similar) and with configuration management or asset inventory data as a reporting source.
Experience designing metrics or scoring models from scratch, including defining the measure, validating it against known outcomes, and defending it to stakeholders.
Experience handing off a report, dashboard, or automated process to an operating team, including documentation and training.
Familiarity with statistical fundamentals, including distributions, sampling, trend analysis, and outlier detection, applied to operational rather than research data.
Experience with version control (Git or similar) and with documenting analytical work for reuse.
Exposure to regulated industries such as utilities, energy, defense, healthcare, or financial services, including NERC CIP environments.
Exposure to evidence handling for regulatory audit (NERC CIP, BCSI), including timestamped artifacts, non-editable formats, and controlled storage locations.
Cybersecurity-related or data platform certifications (CompTIA Security+, CySA+, Microsoft Power BI Data Analyst, or equivalent).
Education:
Associate's degree or equivalent professional work experience required.
Bachelor's degree preferred, in data science, statistics, mathematics, computer science, information systems, cybersecurity, or a related field.
Employee Benefits:
Remote and Hybrid working environment
Competitive pay structure
Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
Company paid life, short- and long-term disability insurance
Employee Assistance Program
401(k) match
Flexible Paid Time Off
Parental Leave
Employment Perks:
We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
Tuition and certification reimbursement
Employee Referral Programs
Company Sponsored Events
Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.
For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
