Tier 2 Security Analyst

WEBIT Services is seeking a Tier 2 Security Analyst in Naperville, IL to strengthen client security outcomes through incident response leadership, SIEM/MDR detection tuning, and vulnerability management lifecycle execution. This is an onsite role focused on hands-on investigation, policy implementation, and documentation that supports Tier 1 operations.

Key Responsibilities

• Lead incident response for security events, managing activities from containment and investigation through eradication and remediation, and document each incident to a reviewable standard.
• Run incident bridges, keep infected clients informed, and lead the post incident review.
• Own SIEM/MDR alert tuning and detection rule management for assigned clients, reducing noise while maintaining coverage.
• Handle escalated alerts from EDR/MDR, Microsoft 365 Defender, Entra ID sign-ins logs, and the email security platform.
• Administer EDR policies and exclusions and manage the email security rule set.
• Own the vulnerability management lifecycle for assigned clients, including scanning, prioritization, opening remediation tickets to the Help Desk and Field Teams, and tracking items to closure.
• Verify MFA, Conditional Access, and backup status by risk for prioritized items, and remediate gaps against the WEBIT security baseline.
• Perform remediation aligned to client frameworks and document evidence for audits and reviews.
• Lead quarterly reviews and present findings.
• Implement Conditional Access, MFA, and Intune security policy changes to defined standards.
• Author runbooks used by Tier 1 analysts.

Required Qualifications

• Relevant certifications and demonstrated competency apply.
• 2+ years of experience in IT support or security operations, including 1 year investigating and responding to security alerts or incidents.
• Hands-on experience with EDR/MDR platforms, including Microsoft 365, Microsoft Defender, and Entra ID.
• Ability to explain a security finding to a non-technical client contact.
• Prior MSP experience in multi-tenant environments, SLA-driven delivery, and PSA workflows.
• Certifications: CompTIA Security, Microsoft SC-900, CompTIA CYSA+ or Microsoft SC-200, CompTIA Network+, Microsoft AZ-900, plus certifications for EDR/MDR platforms.
• Works autonomously, acts proactively, and meets KPI targets.
• Writes SOPs and drives process improvement.

Technologies

• SIEM, MDR, EDR
• Microsoft 365, Microsoft Defender, Microsoft 365 Defender
• Entra ID
• Conditional Access, Intune

Compensation

USD 75,000 - 90,000 per year.

Location: Naperville, IL (onsite).

Benefits

• Company-paid Insurance Premium for Employee
• Company-paid STD
• Company-paid LTD
• Vision options
• Dental options
• 401k match program
• Employee ownership eligible after 1 year of service
• Unlimited PTO after 90 days of service

Position Summary

The Tier 2 Security Analyst is a working core of WEBIT’s security function. The role leads incident response from containment through remediation, owns alert tuning and detection rules in the SIEM/MDR platform, and runs vulnerability management lifecycle activities for assigned clients. This hands-on position also includes authoring runbooks that Tier 1 analysts follow, turning alerts into confirmed findings, findings into remediation tickets, and resolved items into documented guidance.