Cybersecurity Technician II in Whippany, New Jersey at Preferred Business Systems, Inc

Preferred Business Systems has been serving the office automation and IT support needs of the regional business community since 1997. We pride ourselves on delivering high-quality service, innovative solutions, and comprehensive cybersecurity support to ensure our clients’ operational efficiency and security.

We are seeking a Cybersecurity Technician II to lead security platform deployment and hardening work across our client base. This is a project-oriented technical role for someone who knows the security tooling landscape, can assess what a platform is genuinely good for, and can figure out what it actually takes to roll a given control out across a range of client environments.

Working directly with the Cybersecurity Manager, you will scope hardening initiatives, evaluate and deploy security platforms, and build the game plan for standardizing controls across customers. You will also serve as the first escalation point for day-to-day security alerts and handle incident response work as it arises.

The Cybersecurity Manager retains ownership of client compliance engagements and audit interfaces. Your focus is the technical work: deploying them well, and making security consistent across a diverse client base.

• Scope and lead security hardening projects across client environments.

• Assess what it takes to deploy a given security control or methodology at scale — effort, prerequisites, client impact, and rollout sequence.

• Work with the Cybersecurity Manager to build deployment plans and prioritize initiatives across the client base.

• Deploy, configure, and tune security platforms, then document the resulting configurations and standards.

• Pilot new controls with a subset of clients before broader rollout, and report honestly on what did and did not work.

• Support security implementation during new client onboarding.

• Maintain working knowledge of the security platform landscape — endpoint protection and EDR, SIEM, email security, identity and MFA, patch management, backup, and network security tooling.

• Evaluate platforms for fit: what a tool actually does well, where it overlaps with what we already run, and which client profiles it suits.

• Gauge the appropriate scope of deployment for a given tool rather than defaulting to deploying everything everywhere.

• Provide the Cybersecurity Manager with clear technical recommendations

• Assess client environments against hardening baselines such as CIS Benchmarks.

• Develop and maintain standard security configurations the team can apply consistently.

• Identify configuration drift and gaps across client environments and drive remediation.

• Document hardening standards, deployment runbooks, and internal procedures.

• Monitor and investigate alerts across SIEM, IDS/IPS, and endpoint detection platforms.

• Tune detection rules and alert thresholds to reduce false positives and improve signal quality.

• Perform log analysis to identify indicators of compromise (IoCs).

• Track emerging threats and translate them into practical configuration changes.

• Run and oversee vulnerability scanning across assigned client environments.

• Prioritize findings by real-world risk rather than raw scanner severity.

• Develop remediation plans and drive them to completion with client and internal teams.

• Report on remediation progress and residual risk.

• Serve as the first escalation point for security alerts, including critical alerts outside standard business hours.

• Investigate security incidents, perform containment actions, and coordinate with the SOC.

• Escalate high-severity events to the Cybersecurity Manager with a clear picture of scope and impact.

• Document incident timelines, actions taken, and technical findings.

• Implement and verify the technical controls required by frameworks such as HIPAA and PCI-DSS.

• Provide technical evidence and configuration documentation to support audits.

• Flag technical compliance gaps to the Cybersecurity Manager, who owns the client and auditor relationship.

• Coordinate with networking, helpdesk, and systems teams to keep security consistent across environments.

• Mentor Technician I staff, review their work, and support their certification progress.

• Write and maintain playbooks, runbooks, and internal security documentation.

• Participate in client-facing technical discussions on project work alongside the Cybersecurity Manager.

• Minimum 3 years in IT, with at least 2 years focused on security work.

• Hands-on experience deploying and configuring security platforms across multiple environments — not just operating a single tool someone else set up.

• Experience with endpoint protection or EDR, SIEM, and vulnerability scanning tools.

• Experience administering or securing firewalls and VPNs.

• Experience scoping technical work — estimating effort, identifying prerequisites, and sequencing a rollout.

• CompTIA Security+ and/or Network+, or an equivalent certification.

• Relevant formal education or coursework in cybersecurity, information technology, or a related field is accepted in place of certification.

• Working familiarity with the major categories of security tooling, and the judgment to assess what each is genuinely useful for.

• Understanding of system hardening concepts and baseline frameworks such as CIS Benchmarks.

• Solid grasp of networking fundamentals: TCP/IP, DNS, segmentation, firewalls, VPNs.

• Working knowledge of Windows administration and Active Directory; general familiarity with Linux and macOS.

• Understanding of core security principles: encryption, authentication, identity management, and risk.

• Awareness of the technical control requirements behind HIPAA, PCI-DSS, and similar frameworks.

• Ability to break a broad objective into a concrete, sequenced plan and explain the tradeoffs.

• Strong written documentation habits — configurations, runbooks, and standards others can actually follow.

• Ability to explain technical recommendations clearly, including when the honest answer is that a tool is not worth deploying.

• Ability to prioritize across multiple client environments with competing urgency.

• Availability to respond to critical security alerts outside of standard business hours.

• Reliable on-site attendance during standard business hours.

• Prior experience at a Managed Service Provider (MSP) or MSSP.

• Experience securing Microsoft 365 and Azure environments; AWS exposure also valuable.

• Experience standardizing security tooling across a multi-tenant or multi-client environment.

• Additional certifications such as CompTIA CySA+, GSEC, or vendor certifications on platforms we run.

• Experience mentoring or training junior technical staff.

• Experience supporting clients in healthcare, financial services, or other regulated industries.