Senior Associate, IT Security

Fortitude Re

. Monitor, triage, investigate, and escalate security alerts in coordination with the MSSP .

Posted 11/12/2026full-timeRemote • United StatesSenior💰 $110,000 - $115,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity incident response, vulnerability management, and security monitoring across various domains, including endpoint, cloud, and email. Proficient in producing audit-quality documentation and collaborating with cross-functional teams to enhance security operations.

Highest-signal resume keywords

Cybersecurity Incident ResponseVulnerability Management WorkflowsSecurity Monitoring and InvestigationSIEM and EDR ToolsAudit and Regulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationVulnerability PrioritizationPhishing Campaign AnalysisSecurity DocumentationRisk Acceptance CoordinationEvidence CollectionTimeline ConstructionOperational Metrics ProductionProcess ImprovementSecurity Alert Triage

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationMentoring and Knowledge TransferCollaborationIndependent Work

Tools & Technologies

SIEMEDREmail Security PlatformsVulnerability Management ToolsCNAPPAWS Cloud SecurityAzure Cloud SecurityWeb Security ToolsProxy ToolingMSSP

Certifications & Qualifications

CompTIA Security+CompTIA CySA+GIAC CertificationsMicrosoft SC-Series CertificationsAWS Security SpecialtyCEHEJPT

Industry Keywords

NYDFSNIST CSFSOC 2Regulated IndustriesCybersecurityIncident ResponseSecurity OperationsAudit ReadinessControl TestingRisk Management

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Monitor, triage, investigate, and escalate security alerts in coordination with the MSSP
Contribute to incident response across endpoint, cloud, identity, and email domains, including containment, evidence collection, timeline construction, and documentation
Analyze logs, telemetry, and outputs from EDR, SIEM, CNAPP, email security, and web security platforms
Monitor MSSP queue health, service levels, and escalation quality; recommend tuning and process improvements
Maintain security incident playbooks and runbooks
Produce after-action notes, operational metrics, and executive reporting
Operate vulnerability management workflows, including scan review, finding triage, remediation tracking, SLA reporting, and risk acceptance coordination
Prioritize vulnerabilities using CVSS, EPSS, CISA KEV, business impact, and regulatory significance
Coordinate remediation with infrastructure, cloud, and application teams
Produce vulnerability metrics and support attack surface reviews and cleanup efforts
Investigate phishing emails and coordinate quarantine, block list updates, and user notifications
Analyze email security telemetry and support phishing simulations, security awareness reporting, and user education feedback
Support audit and regulatory evidence requests, control testing, documentation, and audit readiness
Produce evidence aligned with NYDFS 23 NYCRR 500, NIST CSF, and other applicable frameworks
Coordinate with internal audit and compliance partners
Contribute to security operations projects, tool deployments, control enhancements, process improvements, and automation
Assist the AVP Security Architect with technical tasks and operational execution
Partner with infrastructure, cloud, IT, and business units
Mentor junior staff or interns and share knowledge through documentation and knowledge-transfer sessions

Requirements

What you’ll need

5+ years of experience in a cybersecurity analyst, security operations, or information security role
Hands-on experience with security monitoring, incident investigation, and response workflows in an enterprise environment
Working knowledge of SIEM, EDR, email security, and vulnerability management tooling
Experience operating vulnerability management workflows end to end, including scan review, finding prioritization, remediation coordination, and SLA tracking
Experience investigating phishing campaigns and operating email security platforms
Ability to investigate security events across multiple data sources and communicate findings to technical and non-technical stakeholders
Strong written and verbal communication skills
Ability to produce audit-quality documentation and incident records
Familiarity with NYDFS, NIST CSF, SOC 2, or equivalent frameworks
Ability to prioritize and escalate risks appropriately
Ability to work independently and as part of an incident response team
Preferred: experience with MSSP or co-managed SOC models
Preferred: familiarity with CNAPP, EDR, AWS or Azure cloud security, enterprise email security, web security and proxy tooling, and regulated industries
Nice to have: CompTIA Security+, CompTIA CySA+, GIAC certifications, Microsoft SC-series certifications, AWS Security Specialty, CEH, or eJPT

Benefits

Comp & perks

Annual bonus based on company and individual performance
Generous benefits package
Equal opportunity and inclusive workplace culture
AI-powered application review tool with opt-out request option