Tier 2 Security Analyst
Core
Lead incident response for security events, tune SIEM/MDR alerts, and manage the vulnerability lifecycle for assigned clients.
Role type
Tier 2 Security Analyst (hands-on IC)
Builds
Incident response playbooks, detection rules, and remediation workflows for MSP clients
Domain
Managed Services Provider (MSP) / Cybersecurity Operations
Required skills
Incident response, SIEM/MDR alert tuning, EDR/MDR platform administration, vulnerability management, Microsoft 365 Defender, Entra ID, Conditional Access, MFA, Intune, remediation documentation
Preferred skills
MSP experience, SLA-driven delivery, PSA workflows, CompTIA Security+, Microsoft SC-200, CompTIA CYSA+, CompTIA Network+, Microsoft AZ-900, EDR/MDR platform certifications
Technologies
SIEM, MDR, EDR, Microsoft 365, Defender, Entra ID, Microsoft Intune, PSA
Responsibilities
Lead incident response from containment to remediation, tune SIEM/MDR detection rules, administer EDR policies and email security rules, manage vulnerability scanning and remediation tickets, implement Conditional Access and MFA policies, document incidents and runbooks, present quarterly security reviews
Seniority
Mid-level, hands-on IC
