Fortress Information Security

• Rotate through four business areas, each on a quarterly basis, meeting the specific deliverables and quality standards of each Rotation Lead's team. • Consistently deliver on assigned workload, commitments, deadlines, and objectives while following established service level agreements in scope and leveraging appropriate tools, methods, frameworks, and professional standards. • Curate and organize company-specific information from public, private, and proprietary sources through data collection, analysis, evaluation, and risk-scoring. • Collaborate with internal partners and third parties to enhance, mitigate, and resolve third-party risks. • Represent Fortress as a key point of contact to clients and their third parties as rotation assignments require. • Support Validated Controls Assessment (VCA), AI Monitoring, data integrity QA, and program management activities depending on current rotation. • Communicate effectively and professionally within each rotation team and with cross-functional partners. • Track assigned work efficiently while meeting given deadlines across changing rotation assignments. • Other duties as assigned.

• Transition applications from traditional (non-containerized) Ansible deployments to containerized, orchestrated deployments in AWS and on-premises environments • Build upon current CI/CD efforts to support different deployment strategies (Blue/Green, Canary, etc.) • Support Development/QA/UAT efforts by building an environment for anyone in the company to test drive a release anywhere in the development lifecycle • Improve common infrastructure for developers, such as CI/CD pipelines, log/application monitoring, cluster management, and configuration management • Migrate application secrets and configuration from Ansible Vault to Hashicorp Vault • Automate infrastructure provisioning during deployment • Handle code deployments in all environments (cloud, on-premises) • Implement tools to monitor and alert with respect to service level metrics and objectives • Provide technical guidance and educate team members and coworkers on development and operations • Monitor relevant systems for availability and performance • Available to support daytime and after business hours release activities

• Design, build, and operate orchestration frameworks supporting long-running, stateful AI workflows and agent execution systems • Develop distributed retrieval architectures spanning vector, graph, search, and relational data platforms • Build shared platform services, reusable runtime components, and tool registries supporting AI capabilities across Fortress products • Implement resilient event-driven and change-data-capture (CDC) pipelines with strong consistency, retry, and fault-tolerance guarantees • Develop typed APIs and integration contracts supporting AI workflows and platform interoperability • Improve scalability, performance, reliability, and operational efficiency across orchestration and retrieval infrastructure • Support secure multi-tenant deployments across cloud, hybrid-cloud, and air-gapped environments • Build and maintain observability, telemetry, tracing, centralized logging, governance, and policy enforcement tooling • Contribute to engineering standards and architectural patterns for orchestration, retrieval, and platform infrastructure • Collaborate cross-functionally with platform engineering, product engineering, security, and AI teams to support platform adoption and operational excellence • Participate in troubleshooting, incident response, root cause analysis, and operational support activities related to platform infrastructure • Continuously evaluate emerging technologies, tooling, and engineering practices relevant to AI infrastructure and distributed systems

• Manage cross-functional release projects with oversight through the entire lifecycle, from planning through deployment • Coordinate with product, engineering, QA, and DevOps teams to schedule and deploy new releases • Establish and maintain a consistent release process across multiple applications, including release calendars and readiness criteria • Conduct Go/No-Go meetings, ensuring alignment between dependent teams and business lines before each release • Identify and manage cross-team dependencies and risks that could affect release timelines • Set, manage, and communicate release expectations and status to team members, stakeholders, and customers • Lead post-release reviews and retrospectives to drive continuous improvement of the release process • Other duties as assigned

• Lead and manage complex, high-stakes projects from initiation through completion. • Oversee the entire project lifecycle, collaborating with external resources to align customer requirements with company objectives and ensuring successful implementation. • Develop comprehensive IT project plans, including task breakdowns, milestones, timelines, and resource allocations. • Proactively adjust project plans to accommodate changes and manage risks, ensuring timely delivery of project milestones. • Set and manage project expectations with team members, stakeholders, and clients. • Act as the primary point of contact for project updates and proactively resolve any issues or concerns. • Serve as an SME for Fortress products, staying updated on the latest features, functionalities, and client engagement best practices. • Leverage your expertise to advise clients and provide insights on how Fortress solutions can best meet their needs. • Act as an escalation point for complex project and technical challenges, contributing directly to problem-solving and resolution when needed. • Build strong client relationships by representing Fortress in a consultative, solutions-oriented manner during project execution. • Partner with clients to align technical solutions with business needs, providing guidance on implementation approaches and best practices. • Identify opportunities to improve delivery outcomes, including process improvements, solution adjustments, and alignment across stakeholders. • Other duties as assigned.

• Collaborating with sales, product, and customer success teams to understand client requirements and tailor solutions that meet their specific needs • Designing and deploying solutions for cyber security risk management and cybersecurity asset attack surface management ecosystems • Providing support during presales activities such as configuring sandbox environments and solution refinement • Keeping abreast of new cybersecurity trends, technologies and threats and updating solutions accordingly • Delivering technical presentations, training sessions, and demonstrations to clients and internal teams • Participating in the testing and validation of new products and solutions • Other duties as assigned

• Direct and influence multi-disciplinary teams within Fortress (i.e., products, development, etc.) in support of Client requirements and objectives. • Serve as the SME for cyber security in multiple domains (i.e., asset management, threat and vulnerability management, risk management, etc.) • Work with Client team leads to determine program pain points and provide suggested solutions. • Manage the creation of Client test cases for each platform release, communicate testing timeframes, and troubleshoot failed test cases. • Ensure that work is being completed to client and internal quality standards for all analysts. • Periodic programmatic status reporting (i.e., monthly, quarterly, and annually) by client. • Execute managerial duties, including but not limited to, conducting ongoing conversations, providing feedback, coaching, and training, and participating in performance management. • Other duties as assigned.

• Drive the Office of IDCV operating cadence across strategic accounts. • Analyze customer priorities, corporate filings, risk findings, program outputs, operational performance, industry developments, and stakeholder feedback to identify risks and opportunities. • Interview Sales, Customer Success, Product, Operations, and other stakeholders to understand the priorities of customer executives and management teams. • Connect information across multiple sources and develop clear recommendations for how Fortress should execute, demonstrate value, resolve gaps, and support the customer’s strategic agenda. • Prepare and improve QBRs and executive presentations that clearly communicate Fortress’s performance, findings resolution, risk reduction, cost reduction, and customer value. • Quantify program value using risk reduction, avoided loss, time saved, compliance velocity, tool displacement, labor reallocation, and other defensible measures. • Create account recovery plans for at-risk customers and expansion narratives for customers that could benefit from additional Fortress capabilities. • Identify, track, and escalate value leaks, including open commitments, aging tickets, unresolved findings, data gaps, reporting issues, and capability blind spots. • Create IDCV processes, establish them through stakeholder alignment and direct execution, and ensure they become repeatable operating practices. • Hold accountable teams and individuals responsible for agreed actions, customer commitments, QBR readiness, and value delivery. • Build AI-enabled workflows for customer research, risk analysis, QBR preparation, content retrieval, value storytelling, and operating visibility. • Maintain executive-ready reporting on account readiness, risks, opportunities, decisions needed, and follow-up actions. • Provide guidance, coaching, and training to Customer Success and cross-functional partners on IDCV methods, account analysis, and value storytelling. • Perform other duties as assigned.

• Serve as the primary point of accountability for assigned Department of War program execution, customer engagement, and contractual obligations. • Support executive leadership by providing operational continuity, program oversight, and coordination across Government Solutions initiatives. • Manage the full lifecycle of government contracts, including deliverable tracking, milestone management, contract modifications, option year activities, and performance monitoring. • Coordinate with legal, finance, security, product, and technical teams to ensure contractual compliance and successful program execution. • Develop and maintain program schedules, status reports, action trackers, risk registers, and customer communications. • Conduct funding analysis, monitor program financial performance, and identify potential budget or resource risks. • Support pricing activities, budget planning, forecasting, and financial reviews for Government Solutions programs. • Lead onboarding activities for new personnel supporting Government Solutions programs, ensuring operational readiness and successful integration. • Coordinate security clearance processing activities with internal security personnel, government security offices, and customer stakeholders. • Maintain clearance tracking records and proactively manage investigation, renewal, and upgrade requirements. • Support implementation and onboarding of new customers, program offices, and defense organizations as Fortress expands its Government Solutions portfolio. • Establish and maintain program documentation, operating procedures, stakeholder maps, and customer engagement plans. • Facilitate cross-functional collaboration between delivery teams, program managers, product teams, and executive leadership. • Monitor program risks, dependencies, and issues while developing mitigation plans and escalation paths when necessary. • Develop, maintain, and mature standard operating procedures that improve consistency, efficiency, and scalability across Government Solutions programs. • Prepare executive briefings, customer presentations, status reports, and operational updates using advanced Microsoft Office tools. • Utilize AI-enabled productivity tools to improve reporting, planning, documentation, analysis, and operational efficiency. • Represent Fortress professionally in customer meetings, planning sessions, reviews, and other program-related engagements. • Perform other duties as assigned in support of Government Solutions objectives and Fortress strategic priorities.

Senior Software Engineer (JavaScript) Location: Remote – Orlando, FL Compensation: $110,228 - $170,241 per year, depending on experience and qualifications. Employment Type: Full-Time What you can expect as a Senior Software Engineer (JavaScript) at Fortress: As a Senior Software Engineer (JavaScript), you will play a critical role in accelerating Fortress’s top engineering priorities and strategic initiatives. You will design, build, and maintain scalable software solutions that support our mission to secure the software supply chain. This role carries broad technical ownership and decision-making authority across architecture, performance, scalability, and maintainability. You will collaborate closely with Product, Business Owners, QA, and fellow Engineers to deliver high-quality solutions quickly—without compromising performance, security, or reliability. Responsibilities Include: - Design, develop, enhance, and maintain software applications primarily using JavaScript, Node.js, and React. - Architect and implement scalable, maintainable solutions aligned with Fortress engineering standards and best practices. - Develop and integrate RESTful and RPC APIs. - Build responsive, user-centered interfaces leveraging modern UI/UX principles (e.g., Material Design). - Work with both relational and document databases, including PostgreSQL and MongoDB. - Work fluently with agentic coding tools (Claude Code, Cursor, or equivalent) as part of your daily development loop — using them for architecture exploration, refactoring, test generation, code review, and investigation, not just autocomplete. - Translate business requirements into technical solutions through collaboration with Business Owners and cross-functional stakeholders. - Participate in code reviews, architectural discussions, and technical design decisions. - Partner with QA to test, validate, document, and resolve software defects. - Create and maintain technical documentation including feature documentation, release notes, and testing procedures. - Utilize SDLC management tools to manage workflow, provide estimates, track progress, and log work activity. - Champion AI adoption with a growth mindset — ramping up on agentic orchestration and skill standardization alongside the team, establishing shared patterns and raising the bar for engineering practice as the discipline matures. - Evaluate and propose new technologies and architectural improvements to maintain product innovation and market leadership. Minimum Qualifications: - 5+ years of extensive experience with JavaScript, Node.js, React, and associated development tool chains. - Strong proficiency in HTML, CSS, JSON, and Linux-based development environments. - Working proficiency in Python. - Experience designing and integrating RESTful APIs. - Solid understanding of user interface and user experience best practices. - Ability to deliver robust, scalable solutions in a fast-paced environment while maintaining high quality standards. - Ability to design, implement, and guide effective prompting strategies or AI-enabled processes to improve performance, efficiency, and decision-making across teams or functions. - Strong communication skills with the ability to explain technical concepts to non-technical stakeholders. - Ability to independently drive technical decisions while collaborating effectively within a team environment. - Ability to obtain and maintain a U.S. security clearance (required). Preferred Skills: - Experience with relational databases, preferably PostgreSQL. - Experience with NoSQL/document databases, preferably MongoDB. - Experience contributing to scalable, high-availability production systems. - Ability to independently use and refine AI-driven prompts to enhance the quality, efficiency, and insight of regular work processes. Education: - Bachelor's degree in computer science or related discipline, or 5+ years equivalent work experience. Employee Benefits: - Competitive pay structure - Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families - Company paid life, short- and long-term disability insurance - Employee Assistance Program - 401(k) match - Flexible Paid Time Off - Parental Leave Employment Perks: - We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications - Tuition and certification reimbursement - Employee Referral Programs - Company Sponsored Events Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires. For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.