{"id":3557068,"url":"https://alion.io/job/webit-services-tier-2-security-analyst","title":"Tier 2 Security Analyst","company":{"id":8507,"name":"WEBIT Services","domain":"webitservices.com","url":"https://alion.io/company/webit-services","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Naperville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":164000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-03T15:06:18Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"8WEBIT Services is an employee-owned Managed Services Provider committed to delivering an exceptional IT solution. As we continue to grow, we are seeking a Tier 2 Security Analyst to protect our clients' environments and raise the quality of security work across the Naperville, Illinois team.\nPosition Summary\nThe Tier 2 Security Analyst is the working core of WEBIT's security function. You lead incident response for security events, from containment and investigation through remediation, own alert tuning and detection rules in our SIEM/MDR platform, run the vulnerability management lifecycle for assigned clients, and author the runbooks that Tier 1 analysts work from. This hands-on role: you are the person that turns an alert into a confirmed finding, a finding into a remediation ticket, and a resolved ticket into a runbook the next analyst can follow.\nKey Responsibilities\n- Lead incident response for security events, from containment and investigation through eradication and remediation, document each incident to a reviewable standard.\n- Run incident bridges calmly, keep infected clients informed, and lead the post incident review.\n- Own SIEM/MDR alert tuning and detection rule management for the assigned clients, reducing noise without reducing coverage.\n- Invest escalated alerts from the EDR/MDR platform, Microsoft 365 Defender, Entra ID sign-ins logs, and our email security platform.\n- Administer EDR policies and exclusions and the email security rule set.\n- Own the vulnerability management lifecycle assigned for clients: scan, prioritize, open remediation tickets to the Help Desk and Field Teams and track them to closure.\n- Verify MFA, Conditional Access, and backup status across prioritize by risk, and remediate gaps against the WEBIT security baseline.\n- Perform remediation by client's frameworks and document evidence for audits and reviews.\n- Lead quarterly reviews and present findings.\n- Implement Conditional Access, MFA and Intune security policy changes to standards.\nRequirements\nRequired\n- Formal education is not required. Relevant certifications and demonstrated competency also apply.\n- 2+ years of experience in IT support or security operations including 1 year investigating and responding to security alerts or incidents.\n- Hands on experience with EDR/MDR platform. Microsoft 365, Defender, and Entra ID.\n- Able to explain a security finding to a non-technical client contact.\nPreferred\n- Prior MSP experience: multi-tenant environments, SLA driven delivery, and PSA workflows.\n- Certifications CompTIA Security, Microsoft SC-900, CompTIA CYSA+ or Microsoft SC-200, CompTIA Network+,\nMicrosoft AZ-900, certifications for EDR/MDR platforms.\nSuccess in this Role\n- Works automatously, acts proactively and hit your KPI's.\n- Write SOP's and drive process improvement.\nBenefits\nCompany Paid Insurance Premium for Employee\nCompany Paid STD\nCompany Paid LTD\nVision Options\nDental Options\n401k Match program\nEmployee Ownership Eligible after 1 year of service\nUnlimited PTO after 90 days of service","description_format":"text","description_chars":3046,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-31T01:26:20Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":88,"reasons":["conf:0","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/webit-services-tier-2-security-analyst","json_url":"https://alion.io/job/webit-services-tier-2-security-analyst.json","meta":{"generated_at":"2026-11-03T17:05:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23672,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8507},"rest":"https://alion.io/mcp/rest/get_company?id=8507"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwebit-services-tier-2-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwebit-services-tier-2-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwebit-services-tier-2-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/webit-services-tier-2-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwebit-services-tier-2-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3557068}},{"tool":"search_jobs","arguments":{"company":"webitservices.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3557068},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}