Tier 2 Cybersecurity Engineer

On Call Computer Solutions, LLC; Tallahassee (FL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Life insurance

128 Hours PTO

Bonuses & certifications

Job summary

On Call Computer Solutions, LLC in Florida is seeking a Tier 2 Cybersecurity Engineer to join a nationally recognized team of IT professionals. You will own tier-2 incidents, perform advanced investigation, and support containment, eradication, and recovery across SIEM, EDR, and network telemetry.

The role emphasizes hands-on response, clear documentation for technical and non-technical audiences, mentorship of Tier 1 analysts, and participation in incident simulations.

Qualifications

• 5+ years of hands-on SOC/IR/security operations experience.
• Ability to clearly document technical findings for both technical and non-technical audiences.

Responsibilities

• Lead Tier 2–level incidents from investigation through resolution.
• Perform advanced investigation and triage of security alerts from SIEM/EDR and other tools.
• Monitor and respond to alerts, provide enrichment and validation of findings.
• Mentor Tier 1 SOC analysts and participate in incident simulations.

Skills

SOC operations

Incident response

Security operations

Endpoint security

Documentation

Tools

SIEM

EDR tools

Job description

Since its opening in 2003 On Call Computer Solutions has been a nationwide leader in Cyber Security and Compliance solutions for Department of Defense contractors. Our company assists those businesses nationwide who work with the government and must comply with current rules and regulations relating to Cyber Security and proper information system protection.

Are you an experienced Cybersecurity Engineer looking for an opportunity to deliver meaningful, high-impact technical solutions rather than getting weighed down by unnecessary escalations and delays?

Are you interested in joining a nationally recognized, award-winning team of IT professionals known for consistently achieving exceptional first-time resolution rates and client satisfaction?

Do you value having access to advanced tools, comprehensive training, and a collaborative team environment that enables you to operate at the highest level of technical excellence and service delivery?

How about a fully comprehensive benefits package including health insurance, retirement, disability, life insurance, commissions for parts sold, performance bonuses, free snacks, paid certifications, and even more cool stuff that won't fit here!

Are you looking for a long-term career in a rapidly growing mid-sized company where there is still room to have a real impact and GROW?

Benefits

• Excellent health/dental benefits from BCBS/Guardian/Legalshield/Aflac
• Vision, Dental, Company paid $50,000.00 Life insurance policy and Short/long Term disability plan.
• 128 Hours PTO Every Year!
• Bonuses and salary increase potential via our certifications plan

Tier 2 Cybersecurity Engineer –

Core Responsibilities

• Perform advanced investigation and triage of security alerts generated by the SIEM
• Analyze correlated alerts across endpoint, identity, email, and network telemetry
• Distinguish true positives from false positives and document findings clearly
• Lead incident response actions including containment, eradication, and recovery support
• Escalate high-severity incidents with clear impact analysis and recommended actions
• Perform advanced investigation and triage of security alerts generated by the EDR, SIEM, Firewalls, Sentinel, and other security tools.
• Install and configure security solutions as needed

Soc Operations

• Monitor and respond to alerts generated by SOC MDR
• Provide contextual enrichment and validation of SIEM findings
• Act as the internal escalation point for complex or ambiguous detections
• Collaborate with application/SOC support for detection feedback and escalations

Incident Management & Reporting

• Own Tier 2–level incidents from investigation through resolution
• Maintain accurate case documentation and timelines
• Produce clear, customer-facing incident summaries when required
• Contribute to post-incident reviews and lessons learned

Collaboration & Continuous Improvement

• Mentor Tier 1 SOC analysts and assist with escalation handling
• Participate in tabletop exercises and incident simulations
• Stay current on emerging threats, attacker techniques, and tool capabilities
• Recommend improvements to SOC processes, tooling, and response workflows

Required Qualifications

• 5 or more years of hands‑on SOC, IR, or security operations experience
• Strong understanding of:
  • Endpoint security concepts
  • Email and phishing attack chains
  • Identity‑based attacks (credential abuse, MFA bypass)
• Experience working with:
  • SIEM platforms (querying, investigations, rule tuning)
  • Endpoint detection and response tools
• Ability to clearly document technical findings for both technical and non-technical audiences

Required Certifications

• Valid and current CompTIA Security +
• Nice to Have - GCIH (GIAC Certified Incident Handler)
• Nice to Have - CompTIA CySA+