Cyber Security Engineer II

About the role

The Cybersecurity Engineer (Professional) role involves implementing enhancements to core security platforms such as Tenable, Varonis, and Microsoft security stack. Responsibilities include platform engineering, testing, documentation, configuration, and operational support.

Responsibilities

• Implement enhancements to the Tenable vulnerability management platform including connector tuning, asset tagging logic, health monitoring, and data quality improvements
• Support and improve the Varonis data protection and vulnerability reduction platform, including policy updates, rule creation and refinement, access remediation support workflows, and deployment of automation
• Configure, tune, and enhance controls within the Microsoft security stack
• Create and maintain clear, high-quality runbooks, SOPs, architecture diagrams, and configuration documentation
• Perform platform and feature testing, including regression testing, validation of configuration changes, and quality assurance of policies and detections
• Develop and refine detections, alerts, dashboards, and automation workflows across supported platforms
• Provide Tier2-3 support for platform issues, escalations, and service problems
• Participate in on-call rotations as needed to support critical security platforms
• Troubleshoot platform health issues, connector failures, ingestion problems, and performance concerns across supported platforms
• Partner with Incident Response and Vulnerability Management teams to ensure security platforms provide accurate, actionable data
• Identify root causes of recurring issues and implement corrective actions that eliminate problems at the source
• Contribute to security platform roadmaps and backlog grooming
• All other duties as assigned

Requirements

• 5+ years of experience in cybersecurity engineering, security operations, or IT security administration
• Hands-on experience with one or more of the following: Tenable, Varonis, Microsoft Defender suite, Splunk, Azure security tools, or Purview
• Working knowledge of Windows and Linux systems, including basic administration and troubleshooting
• Experience with Python, PowerShell, or bash for automation, scripting, or data manipulation
• Familiarity with enterprise security practices: vulnerability management, detection engineering, access controls, endpoint security, cloud security fundamentals
• Strong analytical and troubleshooting skills with a focus on root-cause analysis and sustainable fixes

Basic Requirements

• Education Requirements: Bachelor’s degree preferred, high school diploma (or equivalent) in lieu of degree if required
• Minimum of high school diploma or equivalent is required

Preferred Requirements

• Experience with container security or Kubernetes (AKS, ACA, ARC, on on-prem K8s/containerd)
• Experience with SIEM (Splunk or Microsoft Sentinel) for basic query creation and debugging
• Familiarity with ServiceNow Security Operations (Vulnerability Response, Incident Response)
• Experience with identity and access technologies (SecureAuth, Duo, Entra ID)
• Experience with REST APIs and JSON/YAML configuration
• Knowledge of security frameworks (NIST, CSF, CIS Controls, MITRE ATT&CK)
• Microsoft SC-200, SC-300, AZ-500, SC-400
• Tenable certifications (Tenable.io or Nessus)
• CompTIA Security+ or CySA+
• (ISC)2 SSCP
• Varonis or data security training/certification
• Terraform Associate, CKA, or similar

Benefits

Our competitive compensation is just one component of Osaic’s total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more.