Tier 2 Security Analyst

WEBIT Services

. Lead incident response for security events from containment and investigation through eradication and remediation; document each incident to a reviewable standard.

Posted 10/31/2026full-timeNaperville • Illinois • United StatesJuniorMid-Level💰 $75,000 - $90,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response, vulnerability management, and security policy implementation, with a strong focus on client communication and process improvement. Proficient in managing EDR/MDR platforms and Microsoft 365 security tools to ensure compliance and effective remediation.

Highest-signal resume keywords

Incident Response ManagementEDR/MDR Platform ExperienceVulnerability Management LifecycleMicrosoft 365 Security ToolsCompTIA Security+ Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseVulnerability ManagementEDR Policy AdministrationSecurity Alert InvestigationMFA ImplementationConditional Access ManagementSOP WritingProcess ImprovementDocumentation StandardsAudit Evidence Documentation

Soft Skills

Client CommunicationAutonomous WorkProactive Problem Solving

Tools & Technologies

Microsoft 365 DefenderEntra IDEmail Security PlatformSIEMMDR

Certifications & Qualifications

CompTIA Security+Microsoft SC-900CompTIA CySA+Microsoft SC-200CompTIA Network+Microsoft AZ-900

Industry Keywords

Incident BridgesMulti-Tenant EnvironmentsSLA Driven DeliveryPSA WorkflowsSecurity Baseline

About the role

Key responsibilities & impact

Lead incident response for security events from containment and investigation through eradication and remediation; document each incident to a reviewable standard.
Run incident bridges, keep infected clients informed, and lead post-incident reviews.
Own SIEM/MDR alert tuning and detection rule management for assigned clients.
Investigate escalated alerts from the EDR/MDR platform, Microsoft 365 Defender, Entra ID sign-in logs, and the email security platform.
Administer EDR policies and exclusions and the email security rule set.
Own the vulnerability management lifecycle for assigned clients: scan, prioritize, open remediation tickets to the Help Desk and Field Teams, and track them to closure.
Verify MFA, Conditional Access, and backup status; prioritize by risk and remediate gaps against the WEBIT security baseline.
Perform remediation according to client frameworks and document evidence for audits and reviews.
Lead quarterly reviews and present findings.
Implement Conditional Access, MFA, and Intune security policy changes to standards.

Requirements

What you’ll need

Formal education is not required. Relevant certifications and demonstrated competency also apply.
2+ years of experience in IT support or security operations including 1 year investigating and responding to security alerts or incidents.
Hands on experience with EDR/MDR platform, Microsoft 365, Defender, and Entra ID.
Able to explain a security finding to a non-technical client contact.
Prior MSP experience: multi-tenant environments, SLA driven delivery, and PSA workflows (preferred).
Certifications CompTIA Security+, Microsoft SC-900, CompTIA CySA+ or Microsoft SC-200, CompTIA Network+, Microsoft AZ-900, and certifications for EDR/MDR platforms (preferred).
Works autonomously, acts proactively and hits KPIs.
Writes SOPs and drives process improvement.

Benefits

Comp & perks

Company Paid Insurance Premium for Employee
Company Paid STD
Company Paid LTD
Vision Options
Dental Options
401k Match program
Employee Ownership Eligible after 1 year of service
Unlimited PTO after 90 days of service