Platform Engineer

Foresite • Overland Park, KS

7d

About The Position

Foresite is hiring an entry-level Platform Engineer I for its Exposure Management team. The role supports customers using managed Tenable vulnerability management and Horizon3.ai NodeZero autonomous pentesting services. The engineer manages the service queue, maintains the health of customer scanning and pentest environments, and responds to customer inquiries. The position offers hands-on experience, structured training, dedicated mentorship, and a potential career path toward becoming a full Security Engineer.

The engineer works closely with the Exposure Management Lead, who guides training, reviews daily queue management, and serves as the first escalation point. Performance is measured by responsiveness, the health of customer scanning environments, and the speed and accuracy of ticket resolution within defined SLAs.

The role includes troubleshooting Tenable and Horizon3.ai issues; maintaining scanning and pentest environments; monitoring coverage and data quality; documenting resolutions; assisting with workflow automation; preparing client-ready reports; and communicating with customers through tickets. The engineer may also cross-train on other exposure management queues and provide backup support across operational pods.

Requirements

• 0–2 years of experience in IT support, help desk, NOC/SOC, or a related technical environment; rigorous academic labs, internships, and dedicated homelabs count.
• Working knowledge of networking fundamentals, including TCP/IP, DNS, subnets, ports, firewalls, and VPNs.
• Understanding of basic Windows and Linux administration and comfort using the command line to troubleshoot services.
• Foundational understanding of security concepts such as CVEs, CVSS scoring, basic patching practices, and common misconfigurations.
• Organization, self-motivation, and discipline in managing queues, tracking follow-ups, and meeting strict SLAs.
• Strong written and verbal communication skills, including the ability to explain technical issues clearly to non-technical clients.
• Associate degree, bachelor's degree, or equivalent practical training or experience in Information Technology, Cybersecurity, or Computer Science.
• Ability to pass a standard background check.

Nice To Haves

• Hands-on exposure to Tenable platforms, including Nessus, Tenable Vulnerability Management, or Security Center, or to Horizon3.ai NodeZero.
• Basic experience with vulnerability or pentesting utilities such as Qualys, Rapid7, Nmap, or Metasploit.
• Basic familiarity with Docker containers and virtualization platforms such as VMware, Hyper-V, or cloud VMs.
• Foundational understanding of Active Directory, credentialed scanning requirements, and least-privilege service accounts.
• Experience with enterprise ticketing platforms such as Jira Service Management, ServiceNow, or ConnectWise.
• Basic scripting exposure for task automation using PowerShell, Python, or Bash, and familiarity with REST APIs.
• Active or in-progress certifications such as CompTIA Security+, Network+, or CySA+, Tenable Certified Nessus Auditor, or other Tenable product accreditations.
• Prior customer-facing support experience in an MSSP or managed services environment.

Responsibilities

• Triage, prioritize, and resolve Tenable and Horizon3.ai service tickets in accordance with SLA targets.
• Troubleshoot failed or incomplete scans, credentialed-scan authentication errors, offline Nessus scanners or agents, and NodeZero host deployment or connectivity issues.
• Document troubleshooting steps, root causes, and resolutions in the ticketing system, and contribute how-to articles to the internal knowledge base.
• Validate complex or high-severity vulnerabilities with reproducible results before escalating them to the Lead Technical SME.
• Work with the automation team to identify repeatable ticket sequences and help convert manual workflows into automated playbooks.
• Cross-train on other exposure management queues and provide backup support across operational pods as assigned.
• Accurately log hours in the department's time-tracking portal by client and task.
• Build, schedule, and monitor recurring Tenable scans and Horizon3.ai NodeZero autonomous pentests.
• Maintain accurate asset lists, scan policies, credentials, tags, and exclusion zones as client environments change.
• Deploy, update, and conduct routine health checks on Nessus scanners, Nessus Agents, and NodeZero Docker hosts.
• Verify scan coverage and data quality, and proactively flag gaps such as unscanned subnets or stale assets.
• Monitor vendor updates and release notes, and safely perform platform upgrades during approved customer maintenance windows.
• Generate and deliver scheduled, client-ready vulnerability and pentest reports.
• Post clear, plain-language ticket updates and route questions outside standard ticket scope to team leadership.

Benefits

• Robust medical insurance options.
• Employer-paid dental coverage.
• Employer-paid short-term and long-term disability coverage.
• Three weeks of paid vacation, additional sick leave, and paid company holidays.
• Training and mentorship to support technical or leadership career development.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree