Incident Response - Security Analyst II / Bala Cynwyd, PA

Tokio Marine North America Services; Bala Cynwyd (PA); On-site; USD 77,000 - 97,000; Full time

Job summary

Tokio Marine North America Services (TMNAS) is seeking an IT Security Analyst II to enforce enterprise information security processes and support incident response and threat management programs. The role requires coordinating operational procedures and providing SME support for security controls across TMNAS IT.

The position involves monitoring security alerts in real time, assessing risk from threats, and conducting malware analysis and forensic examinations.

Qualifications

• Bachelor's degree or equivalent in engineering, computer science, mathematics or science preferred.
• CISSP, CCSP, Security+ or CEH certifications preferred are a plus.
• 2-5 years relevant IT operations experience.
• 1-3 years in information security preferred.
• Experience with domain structures, user authentication, network security and digital signatures preferred.
• Experience with Microsoft Defender and Sentinel, including ability to write moderately complex KQL queries, is required.

Responsibilities

• Monitor and triage security alerts in real time based on severity and business impact.
• Assess business impact and exposure from emerging threats, vulnerabilities, and organizational risk.
• Design, implement, and sustain a proactive threat hunting program supporting continuous security improvement.
• Lead incident response through continuous detection, analysis, and coordinated threat containment and mitigation.
• Conduct static and dynamic malware analysis across multiple operating systems and execution environments.
• Perform forensic examinations on systems, applications and networks to identify indicators of compromise.
• Produce clear technical reports detailing malware behavior, indicators, root cause, and operational impact.
• Experience leveraging threat intelligence and emerging adversary TTPs to develop hunt hypotheses.
• Investigate malicious activity to identify exploited weaknesses, attack techniques, and system or data impact.
• Conduct after-action reviews to validate analysis quality, completeness, and alignment with response standards

Skills

KQL queries

Threat hunting

Incident response

Security operations

Education

Bachelor's degree in engineering, computer science, mathematics or science preferred

Tools

Microsoft Defender

Microsoft Sentinel

Job description

Tokio Marine North America Services (TMNAS) provides professional support services to Tokio Marine Group companies in the United States, including Tokio Marine America, First Insurance Company of Hawaii, and Philadelphia Insurance Companies. Customer service is our focus and our passion! Tokio Marine North America Services adds value in all that we do, providing the best professional service to our business partners, allowing them to achieve their goals. Our talented team delivers actuarial, audit, corporate communications, financial and investment, human capital services, information technology, legal, and payroll expertise to our customers.

Job Summary:

The TMNAS IT Security Analyst II is an operational and functional resource role within the Technology Security and Risk Management function within the TMNAS IT Department. The TMNAS IT Security Analyst II will enforce enterprise information security processes and solutions and will execute the incident response and threat management programs. They will coordinate and develop operational procedures and provide subject matter expertise in support of enterprise information security solutions and controls.

Essential Job Functions:

• Monitor and triage security alerts in real time based on severity and business impact
• Assess business impact and exposure from emerging threats, vulnerabilities, and organizational risk
• Design, implement, and sustain a proactive threat hunting program supporting continuous security improvement
• Lead incident response through continuous detection, analysis, and coordinated threat containment and mitigation.
• Conduct static and dynamic malware analysis across multiple operating systems and execution environments
• Perform forensic examinations on systems, applications and networks to identify indicators of compromise.
• Produce clear technical reports detailing malware behavior, indicators, root cause, and operational impact
• Experience leveraging threat intelligence and emerging adversary TTPs to develop hunt hypotheses
• Investigate malicious activity to identify exploited weaknesses, attack techniques, and system or data impact
• Conduct after-action reviews to validate analysis quality, completeness, and alignment with response standards

Qualifications:

• Bachelor's degree in engineering, computer science, mathematics or science preferred
• CISSP, CCSP, Security+ or CEH certifications preferred
• 2-5 years relevant IT operation experience
• 1-3 years in information security preferred
• Experience with domain structures, user authentication, network security and digital signatures preferred
• Experience with Microsoft Defender and Sentinel, including ability to write moderately complex KQL queries, is required
• Knowledge of typical organizational politics and political tactics; ability to effectively navigate formal and informal communication and decision-making channels
• Knowledge, insight, and understanding of business concepts and processes that are needed for making sound decisions in the context of the company's business; ability to apply this knowledge appropriately to diverse situations
• Strong writing and communication skills
• Strong customer service orientation toward Business Units requiring financial consultation (responsive, consultative, collaborative and accurate)
• Demonstrated ability to work with a group to set its objectives and agenda, generate allegiance to those objectives, and guide and motivate achievement
• Project management skills: Plan, organize, monitor, and control projects, ensuring efficient utilization of resources, to achieve project objectives and deadlines
• Strong interpersonal relationship building skills: able to work with a variety of people and groups in a constructive and collaborative manner
• Strong analytical ability with the capability to determine the root cause of problems and issues and provide solutions
• Strategic thinking; Applies organizational acumen to identify and maintain focus on key success factors for the organization
• Ability to juggle multiple, competing, frequently changing time-sensitive deadlines and priorities
• Ability to work independently and without supervision
• Ability to work and lead effectively as part of a team

Salary range $77,000 to $97,000. Ultimate salary offered will be based on factors such as applicant experience and geographic location. Our company offers a competitive benefits package and bonus eligibility on top of base.