[Hiring] Senior Associate, IT Security @Fortitude Re

Role Description

The Senior Associate, IT Security is a hands-on security operations practitioner embedded within Fortitude Group Services' Security Operations function. This role is responsible for day-to-day monitoring, investigation, and response to security events across the enterprise, with primary focus on:

• Security operations center (SOC) activities
• Vulnerability management operations
• Phishing and email security analysis
• Audit evidence support

The Senior Associate owns the operational execution of recurring security workflows, serves as a technical contributor during incident response, and partners with the Managed Security Service Provider (MSSP) on alert triage and escalation quality.

Success is defined by:

• Consistent operational delivery
• Measurable improvement in alert handling and vulnerability remediation workflows
• Quality of audit and regulatory evidence produced from day-to-day work

Qualifications

• 5+ years of experience in a cybersecurity analyst, security operations, or information security role
• Hands-on experience with security monitoring, incident investigation, and response workflows in an enterprise environment
• Working knowledge of common security platforms and tooling categories including SIEM, EDR, email security, and vulnerability management
• Experience operating vulnerability management workflows end to end including scan review, finding prioritization, remediation coordination, and SLA tracking
• Experience investigating phishing campaigns and operating email security platforms
• Ability to investigate security events across multiple data sources, synthesize findings, and communicate clearly to technical and non-technical stakeholders
• Strong written and verbal communication skills; ability to produce audit-quality documentation and incident records
• Familiarity with regulatory and compliance frameworks applicable to financial services including NYDFS, NIST CSF, SOC 2, or equivalent
• A risk-oriented mindset with the judgment to prioritize and escalate appropriately
• Ability to work independently on recurring operational workflows and as part of a team during active incident response

Requirements

• Experience working within or alongside a Managed Security Service Provider (MSSP) or co-managed SOC model
• Familiarity with Cloud-Native Application Protection Platforms (CNAPP) for cloud asset visibility, vulnerability findings, and runtime security monitoring
• Experience with Endpoint Detection and Response (EDR) platforms for threat detection, forensic triage, and prevention policy management
• Exposure to cloud security operations in AWS or Azure environments including cloud logging and security posture management
• Experience with enterprise email security platforms and anti-phishing controls
• Familiarity with web security and proxy tooling for outbound traffic monitoring and DLP enforcement
• Prior experience in a regulated industry, preferably financial services, insurance, or reinsurance

Certifications (Nice to Have)

• CompTIA Security+ (Sec+)
• CompTIA CySA+ or equivalent analyst-level certification
• GIAC Security Essentials (GSEC) or other GIAC certifications
• Microsoft SC-series certifications (e.g., SC-200 Security Operations Analyst)
• AWS Security Specialty or equivalent cloud security certification
• CEH, eJPT, or other hands-on security practitioner credentials

Benefits

• Base Salary Range: $110,000 — $115,000 USD
• Annual bonus based on company and individual performance
• Generous benefits package