Cyber Data Analyst

Fortress Information Security•Orlando, FL

6h•$55,271 - $62,808•Remote

About The Position

The Cyber Data Analyst owns the analytics, reporting, and data-integrity layer of a vulnerability management program, transforming raw scan, asset, and remediation data into trusted metrics that leadership and client stakeholders rely on to understand program performance and risk posture. This role pairs hands-on data analysis and modeling with deliberate use of approved AI-assisted tooling to detect and resolve data-quality defects at a scale that manual review cannot reach. It is a build-oriented position where new metrics, algorithms, and dashboards originate, are iterated rapidly with stakeholders, and are transitioned to operating teams once stable. It is a compelling opportunity for an analytically minded professional who wants to shape how a security program measures itself, rather than simply execute against existing measures.

Requirements

At least 1 year of experience in data analysis, data science, business intelligence, security analytics, IT operations reporting, or a related field. Recent graduates and candidates with relevant internship experience, coursework, or completion of a data analytics or cybersecurity boot camp will also be considered.
Demonstrated ability to work with large, imperfect data sets, joining across sources, identifying duplicates and gaps, and reconciling records between systems that do not agree.
Proficiency building reports and dashboards, including data modeling and calculated measures.
Advanced proficiency with Excel for data comparison and analysis, including lookups, pivot tables, and conditional logic.
Ability to leverage AI tools and independently design, test, and refine prompts to enhance the quality, efficiency, and insight of analytical and data-remediation work, including judgment about when AI output requires human verification.
Familiarity with cybersecurity concepts including vulnerabilities, patching, CVEs, CVSS scoring, and risk fundamentals; formal training or self-study accepted.
Strong written and verbal communication skills, including the ability to explain analytical methods and findings to non-technical and leadership audiences.
Proficiency with Microsoft Office tools including Word, Excel, PowerPoint, Outlook, and SharePoint.
Strong organizational habits with attention to detail, reliable follow-through, and the ability to manage multiple concurrent workstreams against a fixed reporting calendar.

Nice To Haves

Hands-on exposure to enterprise vulnerability scanning platforms (Tenable, Qualys, Rapid7, or similar), including how scan results, plugin behavior, and credentialed coverage affect data reliability.
Experience with enterprise ITSM or ticketing platforms (ServiceNow, Jira, or similar) and with configuration management or asset inventory data as a reporting source.
Experience designing metrics or scoring models from scratch, including defining the measure, validating it against known outcomes, and defending it to stakeholders.
Experience handing off a report, dashboard, or automated process to an operating team, including documentation and training.
Familiarity with statistical fundamentals, including distributions, sampling, trend analysis, and outlier detection, applied to operational rather than research data.
Experience with version control (Git or similar) and with documenting analytical work for reuse.
Exposure to regulated industries such as utilities, energy, defense, healthcare, or financial services, including NERC CIP environments.
Exposure to evidence handling for regulatory audit (NERC CIP, BCSI), including timestamped artifacts, non-editable formats, and controlled storage locations.
Cybersecurity-related or data platform certifications (CompTIA Security+, CySA+, Microsoft Power BI Data Analyst, or equivalent).

Responsibilities

Own the recurring monthly data-quality reporting cycle: identify, quantify, and trend data-integrity defects across vulnerability, asset, product, and remediation records; report volume, aging, root cause, and downstream operational impact to program leadership on a fixed cadence.
Design, test, and refine AI-assisted workflows, including prompt libraries, structured extraction patterns, and batch review routines, to detect, classify, and correct data-quality defects at scale, maintaining human review and documented validation of all AI-generated output.
Maintain and version the prompt, script, and workflow library supporting AI-assisted data remediation so that methods are reproducible, auditable, and transferable to other analysts and other client programs.
Perform the monthly reconciliation between the business intelligence reporting layer and authoritative scan data from the enterprise vulnerability scanning platform; investigate and resolve record-level variances before publication and document the reconciliation result.
Research and confirm vulnerability and asset ownership following report publication: resolve unassigned, stale, or mis-assigned owners against configuration management and organizational data sources, coordinate corrections with the responsible operating teams, and certify ownership accuracy for the reporting period.
Scope, build, and deliver net-new reporting and ad hoc analytical research at the request of program and client leadership, clarifying the underlying question, identifying available and missing data, and stating the confidence and limitations of the result.
Design and build new metrics, scoring algorithms, and dashboards from scratch, defining the measure, sourcing and modeling the data, validating against known cases, and iterating with stakeholders until the output is trusted and stable.
Transition mature analytics products to the owning operational team once rapid iteration has ended: document the data sources, logic, refresh process, and failure modes; train the receiving team; and provide defined post-transition support.
Partner with operations teams across the vulnerability lifecycle, including identification, disposition, tracking, analysis, exceptions, and asset and configuration management, to trace data defects to their process origin and recommend upstream corrections rather than recurring downstream cleanup.
Produce audit-ready documentation of analytical methods, data lineage, and reporting definitions sufficient for regulatory review and for client questions on how a published number was derived.
Support additional analytical, reporting, and program improvement projects as assigned.
Other duties as assigned.

Benefits

Remote and Hybrid working environment
Competitive pay structure
Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
Company paid life, short- and long-term disability insurance
Employee Assistance Program
401(k) match
Flexible Paid Time Off
Parental Leave
professional growth opportunities through succession planning, up-skilling, and certifications
Tuition and certification reimbursement
Employee Referral Programs
Company Sponsored Events