Tier 2 Security Analyst: Incident Response & SIEM Lead

WEBIT Services; Naperville (IL); On-site; USD 85,000 - 115,000; Full time

Benefits offered by this job

Company Paid Insurance Premium for EMP

Company Paid STD

Company Paid LTD

Vision Options

Dental Options

401k Match program

Employee Ownership Eligible after 1 yr

Unlimited PTO after 90 days of service

Job summary

WEBIT Services in Naperville, IL is seeking a Tier 2 Security Analyst to protect client environments and elevate security quality. You will lead incident response, tune SIEM/MDR alerts, manage vulnerability lifecycles, and author runbooks for Tier 1 analysts to follow.

The role requires hands-on work with EDR/MDR platforms, Microsoft 365 Defender, and Entra ID, with a focus on reducing noise while maintaining coverage. Collaboration with the MSP team is essential for audit-ready documentation.

Qualifications

• Formal education is not required; relevant certifications and demonstrated competency also apply.
• 2+ years of experience in IT support or security operations including 1 year investigating and responding to security alerts or incidents.
• Hands-on experience with EDR/MDR platform, Microsoft 365 Defender, and Entra ID.
• Able to explain a security finding to a non-technical client contact.

Responsibilities

• Lead incident response for security events from containment to remediation and document each incident to a reviewable standard.
• Run incident bridges calmly, inform affected clients, and lead post-incident reviews.
• Own SIEM/MDR alert tuning and detection rule management for assigned clients.
• Escalate and investigate alerts from EDR/MDR, Microsoft 365 Defender, Entra ID sign-ins logs, and our email security platform.
• Administer EDR policies and exclusions and the email security rule set.
• Own the vulnerability management lifecycle for clients: scan, prioritize, open remediation tickets and track to closure.
• Verify MFA, Conditional Access, and backup status and remediate gaps against the security baseline.
• Lead quarterly reviews and present findings.

Skills

Incident response

Client communication

Threat detection

Tools

EDR/MDR platform

Microsoft 365 Defender

Entra ID

Job description

WEBIT Services in Naperville, IL is seeking a Tier 2 Security Analyst to protect client environments and elevate security quality. You will lead incident response, tune SIEM/MDR alerts, manage vulnerability lifecycles, and author runbooks for Tier 1 analysts to follow.

The role requires hands-on work with EDR/MDR platforms, Microsoft 365 Defender, and Entra ID, with a focus on reducing noise while maintaining coverage. Collaboration with the MSP team is essential for audit-ready documentation.