Incident Response Security Analyst II - Threat Hunter

Tokio Marine North America Services; Bala Cynwyd (PA); On-site; USD 77,000 - 97,000; Full time

Job summary

Tokio Marine North America Services (TMNAS) is seeking an IT Security Analyst II to enforce enterprise information security processes and support incident response and threat management programs. The role requires coordinating operational procedures and providing SME support for security controls across TMNAS IT.

The position involves monitoring security alerts in real time, assessing risk from threats, and conducting malware analysis and forensic examinations.

Qualifications

• Bachelor's degree or equivalent in engineering, computer science, mathematics or science preferred.
• CISSP, CCSP, Security+ or CEH certifications preferred are a plus.
• 2-5 years relevant IT operations experience.
• 1-3 years in information security preferred.
• Experience with domain structures, user authentication, network security and digital signatures preferred.
• Experience with Microsoft Defender and Sentinel, including ability to write moderately complex KQL queries, is required.

Responsibilities

• Monitor and triage security alerts in real time based on severity and business impact.
• Assess business impact and exposure from emerging threats, vulnerabilities, and organizational risk.
• Design, implement, and sustain a proactive threat hunting program supporting continuous security improvement.
• Lead incident response through continuous detection, analysis, and coordinated threat containment and mitigation.
• Conduct static and dynamic malware analysis across multiple operating systems and execution environments.
• Perform forensic examinations on systems, applications and networks to identify indicators of compromise.
• Produce clear technical reports detailing malware behavior, indicators, root cause, and operational impact.
• Experience leveraging threat intelligence and emerging adversary TTPs to develop hunt hypotheses.
• Investigate malicious activity to identify exploited weaknesses, attack techniques, and system or data impact.
• Conduct after-action reviews to validate analysis quality, completeness, and alignment with response standards

Skills

KQL queries

Threat hunting

Incident response

Security operations

Education

Bachelor's degree in engineering, computer science, mathematics or science preferred

Tools

Microsoft Defender

Microsoft Sentinel

Job description

Tokio Marine North America Services (TMNAS) is seeking an IT Security Analyst II to enforce enterprise information security processes and support incident response and threat management programs. The role requires coordinating operational procedures and providing SME support for security controls across TMNAS IT.

The position involves monitoring security alerts in real time, assessing risk from threats, and conducting malware analysis and forensic examinations.