Senior Incident Response/Operations Engineer Tokio Marine North America (TMNA) Bala-Cynwyd, PA Job Details Full-time $119,000 - $165,000 a year 8 hours ago Benefits Profit sharing Disability insurance Health insurance Tuition reimbursement Family leave Parental leave 401(k) matching Qualifications Intrusion detection analysis Threat hunting activities IT operations Reporting (security system operation) Incident management operations support Security threat response protocols Log analysis tools IP networking Cybersecurity investigations Threat intelligence Incident response implementation Network event correlation

Full Job Description Description Marketing Statement:

Join our purpose-driven team and make a difference in people's lives. We offer flexible work options and professional development opportunities in Hawaii and beyond to help you thrive both personally and professionally. Be a part of a local team that is dedicated to helping others in their time of need and make a meaningful impact every day. At First Insurance Company of Hawaii, we meet challenges and opportunities creatively and collaboratively. We pride ourselves on our inclusive company culture and core values: Respect, Integrity, Creating the Future for our Company and Community, and Excellence in Customer Service.

Job Summary:

As the Senior Incident Response/Operations Engineer under the Global Fusion Center US Operations, you will handle day-to-day maintenance of security infrastructure in addition to proactive threat hunting and incident response. Your role will be key in the development, installation, configuration, and continuous improvement of the global security operations service and be critical in the response to external and internal threats. This position will require a blend of technical expertise, analytical skills, and effective communication abilities to ensure swift and efficient handling of security events. You will also be expected to identify opportunities to automate and improve effectiveness of operations.

Essential Job Functions:

Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution Monitor security systems and infrastructure to support best performance and reliability Implement and manage security tools and processes, to detect and mitigate threats Maintain robust security feeds and ensure data integrity Proactively look for threats working with level one analysts, affected teams and security vendors Author threat detection rules and subsequent SOAR playbooks Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services Identify and implement security process automation, continuously improving processes and tools Be a technical subject matter expert for Security Operations and incident Response services Provide expertise to partnered security teams in mitigation of those threats Communicate complex technical information clearly and concisely to both technical and non-technical audiences Collaborate with partner security teams to offer guidance and bolster support of the organization's security infrastructure Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work Influence and align the team's vision and strategy

Qualifications:

8 or more years of experience in an operational cybersecurity role 3 or more years of hands-on incident response experience Experience developing and delivering on incident and program status for leadership Experience in threat hunting including leveraging intelligence data to proactively find and iteratively investigate suspicious behavior across networks and systems Experience analyzing network and host-based security events Proficient System Administration with either Microsoft Windows or Linux Proficient with CLI shells such as PowerShell or bash Proficient with Security Log infrastructure configuration such as Windows Event Forwarding (WEF) or syslog Proficient in an interpreted language such as Python, Perl, or Ruby Familiarity with regular expressions Familiarity with Large Language Models tools such as Ollama Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux Knowledge of networking technologies, specifically TCP/IP and the related protocols Understanding of networks, operating systems, and architecture and how they affect the security posture of a company Strong problem-solving aptitude Demonstrated ownership of projects or tasks Strong verbal and written communication skills Demonstrated professionalism and a calm demeanor while dealing with complex or high-urgency situations Salary range $119,000 to $165,000 . Ultimate salary offered will be based on factors such as applicant experience and geographic location. Our company offers a competitive benefits package and bonus eligibility on top of base.

Salary:

Salary offer is based on a number of factors such as job-related knowledge , skills and experience. Our company offers a competitive benefits package and bonus eligibility on top of base.

Benefits:

We offer profit-sharing, comprehensive health benefits, generous parental and family leave, attractive time off benefits (vacation/floating holiday/sick/observed holidays), tuition assistance, a 401(k) savings plan with company match, a discounted insurance rate, life and disability insurance options, and more!

EEO Statement:

Tokio Marine Group of Companies (including, but not limited to the Philadelphia Insurance Companies, Tokio Marine America, Inc., TMNA Services, LLC, TM Global Services LLC, TM Claims Service, Inc. and First Insurance Company of Hawaii, Ltd.) is an Equal Opportunity Employer. In order to remain competitive we must attract, develop, motivate, and retain the most qualified employees regardless of age, color, race, religion, gender, disability, national or ethnic origin, family circumstances, life experiences, marital status, military status, sexual orientation and/or any other status protected by law.