Incident Response Analyst II — Threat Hunting & Forensics

TMNA Services LLC.; Bala Cynwyd (PA); On-site; USD 77,000 - 97,000; Full time

Job summary

Tokio Marine North America Services (TMNAS) is seeking an IT Security Analyst II to enforce enterprise security processes, lead incident response, and support threat management programs within the TMNAS IT Security function. The role coordinates operational procedures, provides SME input, and collaborates across teams to strengthen defenses.

The position requires hands-on experience in security operations, malware analysis, and reporting, with a focus on continuous security improvement and

Qualifications

• Bachelor's degree in engineering, computer science, mathematics or science preferred
• CISSP, CCSP, Security+ or CEH certifications preferred
• 2-5 years relevant IT operation experience
• 1-3 years in information security preferred
• Experience with domain structures, user authentication, network security and digital signatures preferred
• Experience with Microsoft Defender and Sentinel, including ability to write moderately complex KQL queries, is required
• Strong writing and communication skills
• Strong customer service orientation toward Business Units requiring financial consultation (responsive, consultative, collaborative and accurate)
• Project management skills: Plan, organize, monitor, and control projects, ensuring efficient utilization of resources, to achieve project objectives and deadlines
• Strong interpersonal relationship building skills: able to work with a variety of people and groups in a constructive and collaborative manner
• Strong analytical ability with the capability to determine the root cause of problems and issues and provide solutions
• Strategic thinking; Applies organizational acumen to identify and maintain focus on key success factors for the organization
• Superior attention to detail
• Ability to juggle multiple, frequently changing time-sensitive deadlines and priorities
• Ability to work independently and without supervision
• Ability to work and lead effectively as part of a team

Responsibilities

• Monitor and triage security alerts in real time based on severity and business impact
• Assess business impact and exposure from emerging threats, vulnerabilities, and organizational risk
• Design, implement, and sustain a proactive threat hunting program supporting continuous security improvement
• Lead incident response through continuous detection, analysis, and coordinated threat containment and mitigation
• Conduct static and dynamic malware analysis across multiple operating systems and execution environments
• Perform forensic examinations on systems, applications and networks to identify indicators of compromise
• Produce clear technical reports detailing malware behavior, indicators, root cause, and operational impact
• Experience leveraging threat intelligence and emerging adversary TTPs to develop hunt hypotheses
• Investigate malicious activity to identify exploited weaknesses, attack techniques, and system or data impact
• Conduct after-action reviews to validate analysis quality, completeness, and alignment with response standards

Skills

Strong writing & communication skills

Customer service orientation

Project management

Analytical thinking

Strategic thinking

Attention to detail

Multitasking

Team collaboration

Independent work

Threat hunting

Education

Bachelor's degree in engineering, computer science, mathematics or science

CISSP

CCSP

Security+

CEH

Tools

Microsoft Defender

Microsoft Sentinel

KQL queries

Job description

Tokio Marine North America Services (TMNAS) is seeking an IT Security Analyst II to enforce enterprise security processes, lead incident response, and support threat management programs within the TMNAS IT Security function. The role coordinates operational procedures, provides SME input, and collaborates across teams to strengthen defenses.

The position requires hands-on experience in security operations, malware analysis, and reporting, with a focus on continuous security improvement and