Platform Engineer

Foresite is hiring an entry-level Platform Engineer I to support customers on our managed Tenable vulnerability management and Horizon3.ai (NodeZero) autonomous pentesting services. In this role, you will work the service queue, keep customer scanning and pentest environments healthy, and serve as a responsive, knowledgeable point of contact for customer inquiries.

This role sits on the Exposure Management team and reports to the Exposure Management Lead. It is designed as a hands-on starting point for a career in vulnerability and exposure management, offering structured training, dedicated mentorship, and a clear path toward becoming a full Security Engineer.

What You'll Do:

In this role, you will operate as the primary engine keeping our exposure management services running smoothly. You will partner closely with your Exposure Management Lead, who will guide your training, review your daily queue management, and serve as your first point of escalation. You will be measured on your responsiveness, your ability to keep customer scanning environments healthy, and the speed and accuracy with which you resolve incoming technical tickets within defined SLAs.

Ticket Management & Troubleshooting

• Queue Resolution: Triage, prioritize, and resolve incoming service tickets for Tenable and Horizon3.ai customers in strict compliance with our SLA targets.

• Technical Troubleshooting: Diagnose and resolve common scanning obstacles, including failed or incomplete scans, credentialed-scan authentication errors, offline Nessus scanners/agents, and NodeZero host deployment or connectivity issues.

• Documentation & KB Contribution: Clearly document your troubleshooting steps, root causes, and technical resolutions within the ticketing system, and publish helpful "how-to" articles to our internal knowledge base.

• SME Escalation: Validate complex or high-severity vulnerabilities with reproducible results before escalating them directly to the Lead Technical SME.

• Workflow Automation: Collaborate actively with the automation team to identify repeatable ticket sequences and help transform manual workflows into automated playbooks.

• Cross-Pod Support: Cross-train on other exposure management queues to provide seamless backup support across operational pods as assigned.

• Time Accountability: Log hours accurately within the department's time-tracking portal, broken down by client and specific task.

Environment Maintenance & Integrity

• Scan Orchestration: Build, schedule, and actively monitor recurring Tenable scans (covering Tenable Vulnerability Management/Tenable.io, Tenable Security Center, and Nessus) and Horizon3.ai NodeZero autonomous pentests.

• Asset & Scan Hygiene: Maintain accurate asset lists, scan policies, credentials, tags, and exclusion zones as client networks and environments evolve.

• Deployment & Health Checks: Deploy, update, and perform routine health checks on Nessus scanners, Nessus Agents, and NodeZero Docker hosts.

• Coverage Validation: Verify overall scan coverage and data quality, proactively flagging structural gaps such as unscanned subnets or stale assets.

• Patch & Version Control: Monitor vendor product updates and release notes, and safely execute platform version upgrades during approved customer maintenance windows.

Reporting & Customer Inquiries

• Reporting Deliverables: Generate and deliver scheduled, client-ready vulnerability and pentest reports.

• Status Communications: Post clear, plain-language updates directly within customer tickets, and smoothly route any client questions that fall outside standard ticket scope to team leadership.

Who You Are:

• Aspiring Specialist: You have 0-2 years of experience in IT support, help desk, NOC/SOC, or a related technical environment (rigorous academic labs, internships, and dedicated homelabs count).

• Networking Literate: You have a solid working knowledge of networking fundamentals, including TCP/IP, DNS, subnets, ports, firewalls, and VPNs.

• Systems Generalist: You understand basic Windows and Linux administration, and you feel comfortable utilizing the command line to troubleshoot services.

• Vulnerability Aware: You have a foundational understanding of core security concepts, such as CVEs, CVSS scoring, basic patching practices, and common misconfigurations.

• Dependable Operator: You are organized, self-motivated, and disciplined when managing a queue, showing a strong commitment to tracking follow-ups and meeting strict SLAs.

• Clear Communicator: You possess strong written and verbal communication skills, with an ability to translate complex technical hiccups into simple explanations for non-technical clients.

• Education: Associate degree, Bachelor's degree, or equivalent practical training/experience in Information Technology, Cybersecurity, or Computer Science.

• Compliance: Ability to successfully pass a standard background check.

Nice to Have:

• Platform Exposure: Hands-on exposure to Tenable platforms (Nessus, Tenable Vulnerability Management, or Security Center) or Horizon3.ai NodeZero.

• Tool Familiarity: Basic experience with industry-standard vulnerability or pentesting utilities (such as Qualys, Rapid7, Nmap, or Metasploit).

• Infrastructure Basics: Basic familiarity with Docker containers and virtualization platforms (such as VMware, Hyper-V, or cloud VMs).

• Identity & Access Context: A foundational understanding of Active Directory, credentialed scanning requirements, and the principle of least-privilege service accounts.

• Ticketing Systems: Experience navigating enterprise ticketing platforms like Jira Service Management, ServiceNow, or ConnectWise.

• Scripting Skills: Basic scripting exposure for simple task automation (using PowerShell, Python, or Bash) and familiarity with REST APIs.

• Relevant Certifications: Active or in-progress certifications (such as CompTIA Security+, Network+, or CySA+; Tenable Certified Nessus Auditor; or other Tenable product accreditations).

• MSSP Background: Prior customer-facing support experience within an MSSP or managed services environment.

Why Join the Foresite Team?

At Foresite, we aren’t just another security provider-we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency.

When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people.

What We Offer:

• Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy.

• Employer-Covered Insurance: We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD).

• Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays.

• Growth & Mentorship: Access to world-class training. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership.

• Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.