Tier 2 Cybersecurity Engineer

On Call Computer Solutions, LLC; Houston (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Disability insurance

Life insurance

Bonuses and commissions

Paid certifications

Job summary

On Call Computer Solutions, LLC is seeking an experienced Cybersecurity Engineer (Tier 2) to deliver high-impact security solutions. You will investigate and triage security alerts, manage incidents end-to-end, and support the SOC with escalation handling and post-incident reviews.

Join a nationally recognized team known for first-time resolution and client satisfaction. The role emphasizes collaboration, ongoing training, and staying current with evolving threats and tools, in a demanding

Qualifications

• 5+ years in SOC/IR/security operations
• Strong understanding of endpoint security, phishing chains, and identity-based attacks
• Experience with SIEM platforms and EDR tools
• Ability to document technical findings for both technical and non-technical audiences

Responsibilities

• Perform advanced investigation and triage of security alerts generated by SIEM
• Analyze alerts across endpoint, identity, email, and network telemetry
• Lead incident response actions including containment, eradication and recovery
• Escalate high-severity incidents with clear impact analyses and recommended actions
• Mentor Tier 1 SOC analysts and participate in tabletop exercises

Skills

SOC operations

IR response

Threat investigation

Documentation

Incident management

Tools

SIEM platforms

EDR tools

Firewalls

Sentinel

Job description

Since its opening in 2003 On Call Computer Solutions has been a nationwide leader in Cyber Security and Compliance solutions for Department of Defense contractors. Our company assists those businesses nationwide who work with the government and must comply with current rules and regulations relating to Cyber Security and proper information system protection.

Are you an experienced Cybersecurity Engineer looking for an opportunity to deliver meaningful, high-impact technical solutions rather than getting weighed down by unnecessary escalations and delays?

Are you interested in joining a nationally recognized, award-winning team of IT professionals known for consistently achieving exceptional first-time resolution rates and client satisfaction?

Do you value having access to advanced tools, comprehensive training, and a collaborative team environment that enables you to operate at the highest level of technical excellence and service delivery?

How about a fully comprehensive benefits package including health insurance, retirement, disability, life insurance, commissions for parts sold, performance bonuses, free snacks, paid certifications, and even more cool stuff that won't fit here!

• Excellent health/dental benefits from BCBS/Guardian/Legalshield/Aflac
• Vision, Dental, Company paid $50,000.00 Life insurance policy and Short/long Term disability plan.
• 128 Hours PTO Every Year!
• Bonuses and salary increase potential via our certifications plan

We do cool work here, defying expectations by simply being who we are - each of us makes an impact.

Are you looking for a long-term career in a rapidly growing mid-sized company where there is still room to have a real impact and GROW?

Tier 2 Cybersecurity Engineer -

Core Responsibilities

• Perform advanced investigation and triage of security alerts generated by the SIEM
• Analyze correlated alerts across endpoint, identity, email, and network telemetry
• Distinguish true positives from false positives and document findings clearly
• Lead incident response actions including containment, eradication, and recovery support
• Escalate high-severity incidents with clear impact analysis and recommended actions
• Perform advanced investigation and triage of security alerts generated by the EDR, SIEM, Firewalls, Sentinel, and other security tools.
• Install and configure security solutions as needed

Soc Operations

• Monitor and respond to alerts generated by SOC MDR
• Provide contextual enrichment and validation of SIEM findings
• Act as the internal escalation point for complex or ambiguous detections
• Collaborate with application/SOC support for detection feedback and escalations

Incident Management & Reporting

• Own Tier 2-level incidents from investigation through resolution
• Maintain accurate case documentation and timelines
• Produce clear, customer-facing incident summaries when required
• Contribute to post-incident reviews and lessons learned

Collaboration & Continuous Improvement

• Mentor Tier 1 SOC analysts and assist with escalation handling
• Participate in tabletop exercises and incident simulations
• Stay current on emerging threats, attacker techniques, and tool capabilities
• Recommend improvements to SOC processes, tooling, and response workflows

Required Qualifications

• 5 or more years of hands‑on SOC, IR, or security operations experience
• Strong understanding of:
  • Endpoint security concepts
  • Email and phishing attack chains
  • Identity‑based attacks (credential abuse, MFA bypass)
• Experience working with:
  • SIEM platforms (querying, investigations, rule tuning)
  • Endpoint detection and response tools
• Ability to clearly document technical findings for both technical and non‑technical audiences

Required Certifications

• Valid and current CompTIA Security +
• Nice to Have - GCIH (GIAC Certified Incident Handler)
• Nice to Have - CompTIA CySA+