Note: The job is a remote job and is open to candidates in USA. Fortress Information Security is building a pipeline for an upcoming Cyber Data Analyst opening focused on vulnerability management analytics and reporting. The role transforms scan, asset, and remediation data into trusted metrics, designs AI-assisted data-quality workflows, builds dashboards and scoring algorithms, and supports audit-ready reporting and operational improvements.

Responsibilities

• Own the recurring monthly data-quality reporting cycle: identify, quantify, and trend data-integrity defects across vulnerability, asset, product, and remediation records; report volume, aging, root cause, and downstream operational impact to program leadership on a fixed cadence
• Design, test, and refine AI-assisted workflows, including prompt libraries, structured extraction patterns, and batch review routines, to detect, classify, and correct data-quality defects at scale, maintaining human review and documented validation of all AI-generated output
• Maintain and version the prompt, script, and workflow library supporting AI-assisted data remediation so that methods are reproducible, auditable, and transferable to other analysts and other client programs
• Perform the monthly reconciliation between the business intelligence reporting layer and authoritative scan data from the enterprise vulnerability scanning platform; investigate and resolve record-level variances before publication and document the reconciliation result
• Research and confirm vulnerability and asset ownership following report publication: resolve unassigned, stale, or mis-assigned owners against configuration management and organizational data sources, coordinate corrections with the responsible operating teams, and certify ownership accuracy for the reporting period
• Scope, build, and deliver net-new reporting and ad hoc analytical research at the request of program and client leadership, clarifying the underlying question, identifying available and missing data, and stating the confidence and limitations of the result
• Design and build new metrics, scoring algorithms, and dashboards from scratch, defining the measure, sourcing and modeling the data, validating against known cases, and iterating with stakeholders until the output is trusted and stable
• Transition mature analytics products to the owning operational team once rapid iteration has ended: document the data sources, logic, refresh process, and failure modes; train the receiving team; and provide defined post-transition support
• Partner with operations teams across the vulnerability lifecycle, including identification, disposition, tracking, analysis, exceptions, and asset and configuration management, to trace data defects to their process origin and recommend upstream corrections rather than recurring downstream cleanup
• Produce audit-ready documentation of analytical methods, data lineage, and reporting definitions sufficient for regulatory review and for client questions on how a published number was derived
• Support additional analytical, reporting, and program improvement projects as assigned
• Other duties as assigned

Skills

• At least 1 year of experience in data analysis, data science, business intelligence, security analytics, IT operations reporting, or a related field
• Recent graduates and candidates with relevant internship experience, coursework, or completion of a data analytics or cybersecurity boot camp will also be considered
• Demonstrated ability to work with large, imperfect data sets, joining across sources, identifying duplicates and gaps, and reconciling records between systems that do not agree
• Proficiency building reports and dashboards, including data modeling and calculated measures
• Advanced proficiency with Excel for data comparison and analysis, including lookups, pivot tables, and conditional logic
• Ability to leverage AI tools and independently design, test, and refine prompts to enhance the quality, efficiency, and insight of analytical and data-remediation work, including judgment about when AI output requires human verification
• Familiarity with cybersecurity concepts including vulnerabilities, patching, CVEs, CVSS scoring, and risk fundamentals; formal training or self-study accepted
• Strong written and verbal communication skills, including the ability to explain analytical methods and findings to non-technical and leadership audiences
• Proficiency with Microsoft Office tools including Word, Excel, PowerPoint, Outlook, and SharePoint
• Strong organizational habits with attention to detail, reliable follow-through, and the ability to manage multiple concurrent workstreams against a fixed reporting calendar
• Associate's degree or equivalent professional work experience required
• Hands-on e