Security Analyst

• Lead and coordinate incident response efforts, investigating and resolving security incidents in a timely manner.
• Develop and refine SIEM correlation rules and alerts to improve detection capabilities and reduce false positives.
• Utilize PowerShell and Python scripting to automate repetitive tasks, streamline processes, and enhance efficiency within the SOC.
• Leverage regex patterns to parse and analyze log data for threat detection and correlation.
• Conduct proactive threat hunting activities to identify and mitigate security threats before they escalate.
• Collaborate with cross-functional teams to implement security best practices and enhance the overall security posture.
• Stay abreast of the latest cybersecurity trends, threats, and vulnerabilities to continuously improve SOC operations., * Relying on experience and judgment, this role is responsible for accomplishing varied assignments.
• Develop work plans, establish timelines, and set goals for assigned work.
• Meet commitments on deadlines.
• Review activities, results, and recommendations with management and clients as appropriate.
• Drive improvement in existing business processes.
• Perform work thoroughly in a cost-efficient manner and at a high productivity level.
• Comply with all corporate policies and procedures.
• Report any breakdown in controls to management.
• Conduct all activities in a safe manner.
• No people management responsibility but may provide guidance to less experienced employees.
• Preferred certifications include Sec+, GIAC, or equivalent.

Travel (if required/needed)

• Occasional travel (up to 10% of time)

• 4 Year / Bachelors Degree in a relevant field, * 5 Years of experience in a SOC environment, with a focus on incident response and threat detection., * Certifications such as Sec+, GIAC, or equivalent are highly desirable.
• Proficiency in SIEM platforms and experience tuning and optimizing SIEM rules and queries.
• Strong scripting skills in PowerShell and Python for automation and tool development.
• In-depth knowledge of regex for log parsing and pattern matching.
• Experience with threat hunting methodologies and tools.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills with the ability to effectively communicate technical concepts to non-technical stakeholders.
• Experience with cloud IR, logging, and detection.

• Competitive salary and comprehensive medical, vision, and dental benefit package, with eligibility beginning on your date of hire
• Strong learning culture with ongoing development opportunities
• Basic life and disability insurance
• 401(k) plan with 6% company match
• 20 days of PTO, two floating holidays, approximately 11 paid holidays, and volunteer time off
• Paid parental leave
• An opportunity to do meaningful work and love what you do

Help us insure it. Tokio Marine HCC is a leading global specialty insurance group, backed by the strength and stability of the Tokio Marine Group. With more than 50 years of sustained growth and profitability, and offices across the United States, the United Kingdom, Europe, and other international locations, we offer more than 100 classes of specialty insurance-covering everything from the crops that feed us and the concerts that entertain us to rescuing travelers abroad.

Guided by our Mind Over Risk philosophy, we empower clients to pursue opportunities with confidence while fostering a culture rooted in innovation, collaboration, and trust. Always Advancing, we embrace an entrepreneurial spirit; as Experts in Tomorrow, we anticipate what’s next; and by Reaching Out, we build genuine connections that enable our people and our business to thrive.