WEBIT Services is seeking a Tier 2 Security Analyst in Naperville, IL to strengthen client security outcomes through incident response leadership, SIEM/MDR detection tuning, and vulnerability management lifecycle execution. This is an onsite role focused on hands-on investigation, policy implementation, and documentation that supports Tier 1 operations.
Key Responsibilities
- Lead incident response for security events, managing activities from containment and investigation through eradication and remediation, and document each incident to a reviewable standard.
- Run incident bridges, keep infected clients informed, and lead the post incident review.
- Own SIEM/MDR alert tuning and detection rule management for assigned clients, reducing noise while maintaining coverage.
- Handle escalated alerts from EDR/MDR, Microsoft 365 Defender, Entra ID sign-ins logs, and the email security platform.
- Administer EDR policies and exclusions and manage the email security rule set.
- Own the vulnerability management lifecycle for assigned clients, including scanning, prioritization, opening remediation tickets to the Help Desk and Field Teams, and tracking items to closure.
- Verify MFA, Conditional Access, and backup status by risk for prioritized items, and remediate gaps against the WEBIT security baseline.
- Perform remediation aligned to client frameworks and document evidence for audits and reviews.
- Lead quarterly reviews and present findings.
- Implement Conditional Access, MFA, and Intune security policy changes to defined standards.
- Author runbooks used by Tier 1 analysts.
Required Qualifications
- Relevant certifications and demonstrated competency apply.
- 2+ years of experience in IT support or security operations, including 1 year investigating and responding to security alerts or incidents.
- Hands-on experience with EDR/MDR platforms, including Microsoft 365, Microsoft Defender, and Entra ID.
- Ability to explain a security finding to a non-technical client contact.
- Prior MSP experience in multi-tenant environments, SLA-driven delivery, and PSA workflows.
- Certifications: CompTIA Security, Microsoft SC-900, CompTIA CYSA+ or Microsoft SC-200, CompTIA Network+, Microsoft AZ-900, plus certifications for EDR/MDR platforms.
- Works autonomously, acts proactively, and meets KPI targets.
- Writes SOPs and drives process improvement.
Technologies
- SIEM, MDR, EDR
- Microsoft 365, Microsoft Defender, Microsoft 365 Defender
- Entra ID
- Conditional Access, Intune
Compensation
USD 75,000 - 90,000 per year.
Location: Naperville, IL (onsite).
Benefits
- Company-paid Insurance Premium for Employee
- Company-paid STD
- Company-paid LTD
- Vision options
- Dental options
- 401k match program
- Employee ownership eligible after 1 year of service
- Unlimited PTO after 90 days of service
Position Summary
The Tier 2 Security Analyst is a working core of WEBIT’s security function. The role leads incident response from containment through remediation, owns alert tuning and detection rules in the SIEM/MDR platform, and runs vulnerability management lifecycle activities for assigned clients. This hands-on position also includes authoring runbooks that Tier 1 analysts follow, turning alerts into confirmed findings, findings into remediation tickets, and resolved items into documented guidance.
