Cyber Security Engineer II

Cyber Security Engineer II

Location(s):

Atlanta: 2300 Windy Ridge Pkwy SE, Suite750, Atlanta, GA 30339

La Vista:12325 Port Grace Blvd, La Vista, NE 68128

Oakdale: 7755 3rd St. N, Oakdale, MN 55128

Scottsdale: 18700 N Hayden Rd, Suite 255, Scottsdale, AZ 85255

St. Petersburg: 877 Executive Center Dr. W, Suite 300, St. Petersburg, FL 33702

Osaic has returned to the office on a hybrid schedule requiring a minimum of 4 days weekly in the office. Applicants should be located at one of our hubs listed above and must be willing to work this schedule.

Role Type: Full-time, Non-Exempt

Salary: $130,000 - $155,000 per year + annual ormance-based bonus

Actual compensation offered will be determined individually, based on a number of job-related factors, including location, skills, licensure, experience, and education.

Our competitive compensation is just one component of Osaic’s total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more. To view more details of what you can look forward to, visit our careers page:  Osaic Benefits .

Summary:

The Cybersecurity Engineer (Professional) is a hands-on technical role responsible for delivering improvements across the organization’s core security platforms, including Tenable (Vulnerability Management), Varonis (Vulnerability / Exposure Reduction & Data Security), and the Microsoft Security stack (Defender suite, Purview, Azure security capabilities).

This role contributes to the engineering, testing, documentation, configuration, and operational support of these platforms. The engineer collaborates with cross-functional teams—Security Operations, IT, Cloud, and Application teams—to ensure our controls are effective, reliable, well‑documented, and aligned with best practices.

This role is ideal for an all‑around cyber professional who enjoys platform engineering, automation, improving security controls, and helping mature the organization’s vulnerability reduction and detection capabilities.

Education Requirements:

Bachelor’s degree preferred, high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree. Minimum of high school diploma or equivalent is required.

Responsibilities:

• Implement enhancements to the Tenable vulnerability management platform including connector tuning, asset tagging logic, health monitoring, and data quality improvements
• Support and improve the Varonis data protection and vulnerability reduction platform, including policy updates, rule creation and refinement, access remediation support workflows, and deployment of automation
• Configure, tune, and enhance controls within the Microsoft security stack
• Create and maintain clear, high-quality runbooks, SOPs, architecture diagrams, and configuration documentation
• Perform platform and feature testing, including regression testing, validation of configuration changes, and quality assurance of policies and detections
• Develop and refine detections, alerts, dashboards, and automation workflows across supported platforms.
• Provide Tier2-3 support for platform issues, escalations, and service problems.
• Participate in on-call rotations as needed to support critical security platforms
• Troubleshoot platform health issues, connector failures, ingestion problems, and performance concerns across supported platforms.
• Partner with Incident Response and Vulnerability Management teams to ensure security platforms provide accurate, actionable data.
• Identify root causes of recurring issues and implement corrective actions that eliminate problems at the source.
• Contribute to security platform roadmaps and backlog grooming
• All other duties as assigned.

Basic Requirements:

• 5+ years of experience in cybersecurity engineering, security operations, or IT security administration
• Hands-on experience with one or more of the following: Tenable, Varonis, Microsoft Defender suite, Splunk, Azure security tools, or Purview
• Working knowledge of Windows and Linux systems, including basic administration and troubleshooting
• Experience with Python, PowerShell, or bash for automation, scripting, or data manipulation
• Familiarity with enterprise security practices: vulnerability management, detection engineering, access controls, endpoint security, cloud security fundamentals,
• Ability to write clear, concise documentation including runbooks and technical guides.
• Strong analytical and troubleshooting skills with a focus on root-cause analysis and sustainable fixes.

Preferred Requirements:

• Experience with container security or Kubernetes (AKS, ACA, ARC, on on-prem K8s/containerd)
• Experience with SIEM (Splunk or Microsoft Sentinel) for basic query creation and debugging
• Understanding of ServiceNow Security Operations (Vulnerability Response, Incident Response)
• Familiarity with identity and access technologies (SecureAuth, Duo, Entra ID)
• Experience with REST APIs and JSON/YAML configuration.
  Knowledge of security frameworks (NIST, CSF, CIS Controls, MITRE ATT&CK)
• Microsoft SC-200, SC-300, AZ-500, SC-400
• Tenable certifications (Tenable.io or Nessus)
• CompTIA Security+ or CySA+
• (ISC)2 SSCP
• Varonis or data security training/certification
• Terraform Associate, CKA, or similar

Osaic is an equal opportunity employer. We celebrate diversity in our workplace and we hire the most qualified candidates without regard for age, ethnicity, gender, gender identity or expression, language differences, nationality or national origin, family or marital status, physical, mental, and developmental abilities (or the perception of a disability), genetic information, race, religion or belief, sexual orientation, skin color, social or economic class, education, work and behavioral styles, political affiliation, military service, caste, or any other characteristic protected by law.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Osaic.

Osaic does not consider applications from candidates who do not meet the minimum qualifications stated in the job posting.

Osaic only accepts candidates from contracted recruiting firms and only for searches approved prior to submissions. Fees will not be paid for unsolicited submissions.