> Markdown version of [/jobs/ext/4618909-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4618909-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer - **Company:** Foresite, Inc. - **Location:** Overland Park, KS, United States - **Experience:** Starter - **Contract:** Internship / Graduate position - **Skills:** Microsoft Windows, Active Directory, Software System Penetration Testing, JIRA, Bash Shell, Command-Line Interface, CompTIA Security+, Cyber Security, Computer Networks, Domain Name System (DNS), Hyper-V, Identity and Access Management, Issue Tracking Systems, Subnetting, Virtual Private Networks (VPN), Python (Programming Language), Linux System Administration, Networking Basics, Nmap, Windows PowerShell, Queue Management Systems, TCP/IP, Virtualization Technology, Software Vulnerability Management, Scripting, Firewalls (Computer Science), Information Technology, Metasploit, Nessus, Restful APIs, Software Version Control, Qualys, Docker, Servicenow, Vmware - **Published:** November 7, 2026 - **Apply:** https://www.thejobnetwork.com/job/50ad8e3a-4514-472c-9748-fd1fc05bd851/platform-engineer ## About the Role * Aspiring Specialist: You have 0-2 years of experience in IT support, help desk, NOC/SOC, or a related technical environment (rigorous academic labs, internships, and dedicated homelabs count). * Networking Literate: You have a solid working knowledge of networking fundamentals, including TCP/IP, DNS, subnets, ports, firewalls, and VPNs. * Systems Generalist: You understand basic Windows and Linux administration, and you feel comfortable utilizing the command line to troubleshoot services. * Vulnerability Aware: You have a foundational understanding of core security concepts, such as CVEs, CVSS scoring, basic patching practices, and common misconfigurations. * Dependable Operator: You are organized, self-motivated, and disciplined when managing a queue, showing a strong commitment to tracking follow-ups and meeting strict SLAs. * Clear Communicator: You possess strong written and verbal communication skills, with an ability to translate complex technical hiccups into simple explanations for non-technical clients. * Education: Associate degree, Bachelor's degree, or equivalent practical training/experience in Information Technology, Cybersecurity, or Computer Science. * Compliance: Ability to successfully pass a standard background check. Nice to Have: * Platform Exposure: Hands-on exposure to Tenable platforms (Nessus, Tenable Vulnerability Management, or Security Center) or Horizon3.ai NodeZero. * Tool Familiarity: Basic experience with industry-standard vulnerability or pentesting utilities (such as Qualys, Rapid7, Nmap, or Metasploit). * Infrastructure Basics: Basic familiarity with Docker containers and virtualization platforms (such as VMware, Hyper-V, or cloud VMs). * Identity & Access Context: A foundational understanding of Active Directory, credentialed scanning requirements, and the principle of least-privilege service accounts. * Ticketing Systems: Experience navigating enterprise ticketing platforms like Jira Service Management, ServiceNow, or ConnectWise. * Scripting Skills: Basic scripting exposure for simple task automation (using PowerShell, Python, or Bash) and familiarity with REST APIs. * Relevant Certifications: Active or in-progress certifications (such as CompTIA Security+, Network+, or CySA+; Tenable Certified Nessus Auditor; or other Tenable product accreditations). * MSSP Background: Prior customer-facing support experience within an MSSP or managed services environment., * Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy. ## Description Foresite is hiring an entry-level Platform Engineer I to support customers on our managed Tenable vulnerability management and Horizon3.ai (NodeZero) autonomous pentesting services. In this role, you will work the service queue, keep customer scanning and pentest environments healthy, and serve as a responsive, knowledgeable point of contact for customer inquiries. This role sits on the Exposure Management team and reports to the Exposure Management Lead. It is designed as a hands-on starting point for a career in vulnerability and exposure management, offering structured training, dedicated mentorship, and a clear path toward becoming a full Security Engineer. What You'll Do: In this role, you will operate as the primary engine keeping our exposure management services running smoothly. You will partner closely with your Exposure Management Lead, who will guide your training, review your daily queue management, and serve as your first point of escalation. You will be measured on your responsiveness, your ability to keep customer scanning environments healthy, and the speed and accuracy with which you resolve incoming technical tickets within defined SLAs. Ticket Management & Troubleshooting * Queue Resolution: Triage, prioritize, and resolve incoming service tickets for Tenable and Horizon3.ai customers in strict compliance with our SLA targets. * Technical Troubleshooting: Diagnose and resolve common scanning obstacles, including failed or incomplete scans, credentialed-scan authentication errors, offline Nessus scanners/agents, and NodeZero host deployment or connectivity issues. * Documentation & KB Contribution: Clearly document your troubleshooting steps, root causes, and technical resolutions within the ticketing system, and publish helpful "how-to" articles to our internal knowledge base. * SME Escalation: Validate complex or high-severity vulnerabilities with reproducible results before escalating them directly to the Lead Technical SME. * Workflow Automation: Collaborate actively with the automation team to identify repeatable ticket sequences and help transform manual workflows into automated playbooks. * Cross-Pod Support: Cross-train on other exposure management queues to provide seamless backup support across operational pods as assigned. * Time Accountability: Log hours accurately within the department's time-tracking portal, broken down by client and specific task. Environment Maintenance & Integrity * Scan Orchestration: Build, schedule, and actively monitor recurring Tenable scans (covering Tenable Vulnerability Management/Tenable.io, Tenable Security Center, and Nessus) and Horizon3.ai NodeZero autonomous pentests. * Asset & Scan Hygiene: Maintain accurate asset lists, scan policies, credentials, tags, and exclusion zones as client networks and environments evolve. * Deployment & Health Checks: Deploy, update, and perform routine health checks on Nessus scanners, Nessus Agents, and NodeZero Docker hosts. * Coverage Validation: Verify overall scan coverage and data quality, proactively flagging structural gaps such as unscanned subnets or stale assets. * Patch & Version Control: Monitor vendor product updates and release notes, and safely execute platform version upgrades during approved customer maintenance windows. Reporting & Customer Inquiries * Reporting Deliverables: Generate and deliver scheduled, client-ready vulnerability and pentest reports. * Status Communications: Post clear, plain-language updates directly within customer tickets, and smoothly route any client questions that fall outside standard ticket scope to team leadership.