Senior Cyber Operator

This is a fully remote position, open to applicants in Florida.

📋 Description

• Act as a subject matter expert for the vulnerability management process and platform.

• Take ownership of the complete execution of the most intricate tasks within a designated program area.

• Serve as the primary point of contact for business units, assessing applicability, negotiating remediation timelines, and developing action plans, summary reports, and onboarding materials.

• Conduct credentialed cumulative and ad hoc scans, managing remediation validation and closure.

• Assess evidence from business units, address recurring or incomplete remediation cases, and create audit-compliant evidence packages for regulatory assessments (NERC CIP, BCSI).

• Manage escalated and critical-vulnerability remediation until closure, including mapping asset owners, ticketing, escalation cadence, and validation of closure thresholds.

• Oversee risk acceptance and exception cases through extensions and evidence-based closure processes.

• Ensure data quality across vulnerability, asset, and inventory systems is maintained and enhanced.

• Analyze source or scanner health for any coverage gaps that automated tools do not address.

• Mentor and guide associate and intermediate operators.

• Assist business unit and client program staff with inquiries, troubleshooting, and platform support.

• Lead initiatives for process improvement and standardization.

• Contribute to documentation, templates, and knowledge-sharing efforts.

• Utilize approved AI-assisted tools to enhance research, analysis, and documentation while overseeing the output quality.

• Perform additional duties as assigned.

⛳️ Requirements

• 5–7 years of experience in a professional setting.

• Skilled in implementing cybersecurity frameworks, tools, and best practices.

• Exceptional communication abilities.

• Strong proficiency in Microsoft Office Suite.

• Capable of leveraging AI tools and independently utilizing and refining prompts to improve regular work processes.

• Preferred cybersecurity-related certifications (Network+, Security+, CySA+, or equivalent).

• Hands-on experience in configuring and conducting credentialed vulnerability scans, as well as interpreting scan freshness, coverage gaps, and credential failures is preferred.

• Experience in producing audit evidence packages for regulatory assessments (NERC CIP, BCSI) is preferred.

• Familiarity with negotiating remediation timelines directly with business or asset owners, including discussions around extensions and risk acceptance is preferred.

• Understanding scanner detection behavior, including plugin dependencies, differences between credentialed and uncredentialed results, and recurring or intermittent findings is preferred.

• Exposure to operational technology, industrial control systems, or other environments where standard scanning and patching procedures cannot be applied as outlined is preferred.

• An Associate’s degree is required.

• Participation in E-Verify for all new hires is mandatory.

• A conditional offer requires a drug test for positions based in the US.

🏝️ Benefits

• Flexible remote and hybrid working options.

• Competitive salary structure.

• Medical, dental, and vision plans with up to 90% employee coverage and highly progressive options for dependents and families.

• Company-paid life, short- and long-term disability insurance.

• Access to an Employee Assistance Program.

• 401(k) matching program.

• Flexible Paid Time Off policy.

• Parental leave.

• Opportunities for professional growth through succession planning, skill enhancement, and certifications.

• Tuition and certification reimbursement available.

• Employee referral programs.

• Company-sponsored events.