Senior Associate, IT Security

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

💵 $110k - $115k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 31 days.

Apply Now

Find Similar Remote Jobs

Fortitude Re

WebsiteLinkedInAll Job Openings

201 - 500 employees

🛡️ Insurance

💸 Finance

⚕️ Healthcare Insurance

Insurance • Finance • Healthcare Insurance

Fortitude Re is a reinsurance company that specializes in helping insurance companies around the world address their complex risk transfer challenges. The firm designs and delivers customized solutions for legacy Life & Annuity and Property & Casualty (P&C) insurance lines. Backed by experienced investor groups including The Carlyle Group and T&D Insurance Group, Fortitude Re prides itself on its leadership with over 20 years of industry experience to effectively manage legacy liabilities. Fortitude Reinsurance Company Ltd. , along with its subsidiaries, operates globally with a significant presence in Hamilton, Bermuda.

📋 Description

• Monitor, triage, investigate, and escalate security alerts in coordination with the MSSP • Contribute to incident response across endpoint, cloud, identity, and email domains, including containment, evidence collection, timeline construction, and documentation • Analyze logs, telemetry, and outputs from EDR, SIEM, CNAPP, email security, and web security platforms • Monitor MSSP queue health, service levels, and escalation quality; recommend tuning and process improvements • Maintain security incident playbooks and runbooks • Produce after-action notes, operational metrics, and executive reporting • Operate vulnerability management workflows, including scan review, finding triage, remediation tracking, SLA reporting, and risk acceptance coordination • Prioritize vulnerabilities using CVSS, EPSS, CISA KEV, business impact, and regulatory significance • Coordinate remediation with infrastructure, cloud, and application teams • Produce vulnerability metrics and support attack surface reviews and cleanup efforts • Investigate phishing emails and coordinate quarantine, block list updates, and user notifications • Analyze email security telemetry and support phishing simulations, security awareness reporting, and user education feedback • Support audit and regulatory evidence requests, control testing, documentation, and audit readiness • Produce evidence aligned with NYDFS 23 NYCRR 500, NIST CSF, and other applicable frameworks • Coordinate with internal audit and compliance partners • Contribute to security operations projects, tool deployments, control enhancements, process improvements, and automation • Assist the AVP Security Architect with technical tasks and operational execution • Partner with infrastructure, cloud, IT, and business units • Mentor junior staff or interns and share knowledge through documentation and knowledge-transfer sessions

🎯 Requirements

• 5+ years of experience in a cybersecurity analyst, security operations, or information security role • Hands-on experience with security monitoring, incident investigation, and response workflows in an enterprise environment • Working knowledge of SIEM, EDR, email security, and vulnerability management tooling • Experience operating vulnerability management workflows end to end, including scan review, finding prioritization, remediation coordination, and SLA tracking • Experience investigating phishing campaigns and operating email security platforms • Ability to investigate security events across multiple data sources and communicate findings to technical and non-technical stakeholders • Strong written and verbal communication skills • Ability to produce audit-quality documentation and incident records • Familiarity with NYDFS, NIST CSF, SOC 2, or equivalent frameworks • Ability to prioritize and escalate risks appropriately • Ability to work independently and as part of an incident response team • Preferred: experience with MSSP or co-managed SOC models • Preferred: familiarity with CNAPP, EDR, AWS or Azure cloud security, enterprise email security, web security and proxy tooling, and regulated industries • Nice to have: CompTIA Security+, CompTIA CySA+, GIAC certifications, Microsoft SC-series certifications, AWS Security Specialty, CEH, or eJPT

🏖️ Benefits

• Annual bonus based on company and individual performance • Generous benefits package • Equal opportunity and inclusive workplace culture • AI-powered application review tool with opt-out request option

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume