- 8WEBIT Services is an employee-owned Managed Services Provider committed to delivering an exceptional IT solution. As we continue to grow, we are seeking a Tier 2 Security Analyst to protect our clients' environments and raise the quality of security work across the Naperville, Illinois team.
Position Summary
The Tier 2 Security Analyst is the working core of WEBIT's security function. You lead incident response for security events, from containment and investigation through remediation, own alert tuning and detection rules in our SIEM/MDR platform, run the vulnerability management lifecycle for assigned clients, and author the runbooks that Tier 1 analysts work from. This hands-on role: you are the person that turns an alert into a confirmed finding, a finding into a remediation ticket, and a resolved ticket into a runbook the next analyst can follow.
Key Responsibilities
- Lead incident response for security events, from containment and investigation through eradication and remediation, document each incident to a reviewable standard.
- Run incident bridges calmly, keep infected clients informed, and lead the post incident review.
- Own SIEM/MDR alert tuning and detection rule management for the assigned clients, reducing noise without reducing coverage.
- Invest escalated alerts from the EDR/MDR platform, Microsoft 365 Defender, Entra ID sign-ins logs, and our email security platform.
- Administer EDR policies and exclusions and the email security rule set.
- Own the vulnerability management lifecycle assigned for clients: scan, prioritize, open remediation tickets to the Help Desk and Field Teams and track them to closure.
- Verify MFA, Conditional Access, and backup status across prioritize by risk, and remediate gaps against the WEBIT security baseline.
- Perform remediation by client's frameworks and document evidence for audits and reviews.
- Lead quarterly reviews and present findings.
- Implement Conditional Access, MFA and Intune security policy changes to standards.
Requirements
Required
- Formal education is not required. Relevant certifications and demonstrated competency also apply.
- 2+ years of experience in IT support or security operations including 1 year investigating and responding to security alerts or incidents.
- Hands on experience with EDR/MDR platform. Microsoft 365, Defender, and Entra ID.
- Able to explain a security finding to a non-technical client contact.
Preferred
- Prior MSP experience: multi-tenant environments, SLA driven delivery, and PSA workflows.
- Certifications CompTIA Security, Microsoft SC-900, CompTIA CYSA+ or Microsoft SC-200, CompTIA Network+,
Microsoft AZ-900, certifications for EDR/MDR platforms.
Success in this Role
- Works automatously, acts proactively and hit your KPI's.
- Write SOP's and drive process improvement.
Benefits
Company Paid Insurance Premium for Employee
Company Paid STD
Company Paid LTD
Vision Options
Dental Options
401k Match program
Employee Ownership Eligible after 1 year of service
Unlimited PTO after 90 days of service
Skills Required
- 2+ years of experience in IT support or security operations
- At least 1 year investigating and responding to security alerts or incidents
- Hands-on experience with an EDR/MDR platform
- Experience with Microsoft 365, Microsoft Defender, and Entra ID
- Ability to explain security findings to nontechnical client contacts
- Formal education
- Prior MSP experience with multitenant environments, SLA-driven delivery, and PSA workflows
- CompTIA Security+ certification
- Microsoft SC-900 certification
- CompTIA CySA+ certification
- Microsoft SC-200 certification
- CompTIA Network+ certification
- Microsoft AZ-900 certification
- EDR/MDR platform certification
What We Do
You rely on technology every day, but is it really working for you? Maybe it feels like IT is just one more thing holding your business back. You’ve dealt with recurring issues, sluggish support, missed opportunities, and rising security risks. You’ve invested time and money, but it’s not translating into real progress—or a competitive advantage. You want more than a vendor. You want a technology PARTNER who listens, understands your goals, and helps your team work smarter, not harder. You want proactive strategies, not just reactive fixes. And you want technology that supports growth, aligns with your business plan, and stays ahead of threats—not one that’s constantly behind. That’s where your journey with us begins. At WEBIT Services, we work with organizations that are ready for something better. We start by understanding how your business operates, what outcomes matter most to you, and what’s standing in your way. Then, we build a long-term strategy that transforms your IT from a cost center into a value driver. You don’t need more tools. You need the right ones—backed by an employee-owner team that’s invested in your success. Let’s have a conversation about what’s not working, where you want to go, and how technology can help you get there.
