Senior Engineer, MDR

Tokio Marine HCC - Cyber & Professional Lines Group; United States; On-site; USD 110,000 - 164,000; Full time

Job summary

Tokio Marine HCC - Cyber & Professional Lines Group seeks a Senior Engineer, MDR to lead digital forensics and incident response for insureds. This player-coach role blends deep technical skill with mentorship to enhance investigations, scale processes, and deliver precise outcomes in high‑stakes environments.

You will guide engineers, build scalable tooling, and refine consulting capabilities while maintaining strong client relations and adherence to industry best practices.

Qualifications

• Minimum 4 year / bachelor’s degree in cyber security, Computer Science, Information Technology related degree or relevant professional work experience.
• Proven track record leading and managing security engineering teams and developing security automation/SOAR capabilities.
• Strong scripting/programming skills: PowerShell, Bash, Python, Go, Rust.

Responsibilities

• Lead and mentor an engineering team, assign tasks and develop SOPs.
• Manage client expectations and communicate complex concepts to stakeholders.
• Develop automation to support incident response and digital forensics efforts.

Skills

PowerShell

Python

Bash

Go

Rust

CISSP

CISM

GCFE

GCFA

GREM

GBFA

GCIH

CI/CD

Jenkins

GitHub Actions

GitLab CI

CircleCI

Docker

Kubernetes

Tines

Splunk

Cortex XSOAR

REST APIs

EDR

Defender

SentinelOne

CrowdStrike

SIEM

IAM

VMware

Hyper-V

Education

Bachelor's degree in cyber security, Computer Science, Information Technology related degree

Tools

Docker

Kubernetes

Jenkins

GitHub Actions

GitLab CI

CircleCI

Tines

Splunk

Cortex XSOAR

Defender

SentinelOne

CrowdStrike

Job description

About Vector3

Vector3, Inc., is an incident response firm supporting TMHCC Cyber and Professional Lines Group (CPLG). Vector3 specializes in responding to Business Email Compromise (BEC) and Ransomware incidents, helping insured organizations investigate, contain, and recover from cyber events.

Job Summary

Join us as a Senior Engineer, MDR and take a lead role in shaping our digital forensics and incident response practice for TMHCC-CPLG insureds. In this player-coach position, you’ll combine deep technical expertise with strong leadership to drive complex engineering initiatives that enhance the scale, speed, and precision of our investigations. You’ll guide a team of talented engineers through hands‑on problem‑solving, build scalable solutions for evolving threats, and help refine our consulting capabilities. Your mentorship will elevate team performance, ensuring we continue to deliver exceptional outcomes in high‑stakes environments.

Key Responsibilities

• Leadership and Mentorship:
  • Assign tasks, delegate responsibilities, and provides mentorship to team members.
  • Support development and maintenance of operating procedures and best practices for engineering team.
  • Maintain positive, professional insured/carrier relationships.
  • Foster a culture of innovation, continuous learning, and skill development within the engineering team.
• Client Management and Engagement:
  • Understand insured needs and tailor strategies to address specific business risks and compliance requirements.
  • Communicate complex engineering concepts internally and externally.
• Incident Engineering Operations:
  • Develop and maintain engineering automation in support of incident response plans aligned with industry best practices.
• Technical Experience:
  • Stay informed about emerging engineering technologies and industry best practices.
  • Understand and be aware of digital forensics methodologies for evidence collection, analysis, and reporting.
  • Provide expert technical guidance on engineering methodologies, automation techniques, software development and recovery techniques.
  • Occasionally, support complex digital forensic investigations, including analysis of system logs, network traffic, and endpoint data.

Competencies

• Planning
  • Contribute to the development of both short-term and long-term plans for designated area of the organization.
• Communication
  • Communicate team plans or results, internally and externally, at all organizational levels.
  • Write, or is a major contributor to, technical reports or contractual documents.
  • Present informational briefings.
• Cost Management
  • Develop innovative ways to improve financials.
• Business Controls and Policies
  • Comply with all corporate policies and procedures.

Education Requirements

Minimum 4 year / bachelor’s degree in cyber security, Computer Science, Information Technology related degree or relevant professional work experience

Certification, Licenses, and Designations

3 years former professional experience in leading and managing security engineering teams, developing security automation and/or SOAR capabilities in support of security incident response, digital forensics, malware analysis or threat intelligence. Experience managing active cybersecurity engagements, including security incident response and digital forensics is also required for this role.

Advanced degrees or certifications in security (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) or cloud engineering (AWS Certified Security, Azure Security Engineer, Google Professional Cloud Security Engineer, CCNA, MCSE) are a plus.

Other

• Proven track record of success in managing complex engineering initiatives.
• Experience in conducting security investigations in Linux and Windows environments.
• Understanding of cloud platforms and security considerations within AWS (Amazon Web Services), Azure, Microsoft 365, and GCP (Google Cloud Platform).
• Proficient scripting/programming skills: PowerShell, Bash, Python, Go, Rust
• Proficiency and experience with CI/CD: Jenkins, GitHub Actions, GitLab CI, Circle CI
• Proficiency and experience with containerization: Docker, Kubernetes
• Experience working with middleware or SOAR platforms: Tines, Splunk, Swimlane Cortex XSOAR
• Experience working with RESTful APIs for security automation.
• Experience with EDR solutions (Defender, SentinelOne, CrowdStrike)
• Experience with threat intelligence platforms or open-source solutions.
• Experience with malware analysis methodologies.
• Experience administering various enterprise grade security tools and databases: SIEM, IAM, EDR, firewalls, IDS/IPS, VPN, data warehouses, DLP
• Experience with data backup and recovery, data replication, and data archival technologies.
• Experience with hypervisor technologies: VMWare, MS Hyper‑V
• Strong understanding of legal and regulatory frameworks related to cyber security such as PCI, NIST CSF, or other industry‑specific regulations.
• Excellent communication and presentation skills to clearly and concisely communicate complex technical findings to clients and stakeholders.
• Strong leadership abilities to motivate and mentor team members.
• Superior organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously.
• Knowledgeable of industry changes, legal updates, and technical developments related to applicable area of the Company’s business to proactively respond to changing business environment.
• Advanced proficiency and experience using Microsoft Office package (Excel, Access, PowerPoint, Word).

Additional Working Conditions And Physical Conditions

• Overtime hours may be required to fulfill job responsibilities
• May be required to remain stationary for extended periods of time
• May be required to move up to 10 pounds
• Must be able to operate a computer and other devices
• Close vision and ability to adjust focus, such as required to read a computer screen
• Regular travel (up to 15% of time)

The pay range for this position is $109,500-$164,300 which includes geographic adjustments, where applicable. The pay range is the range THMCC, in good faith, believes is the range of compensation for this role at the time of this posting. The hired applicant will be offered pay within the entire range based on the candidate’s geographic location, qualifications, work experience, education, and/or skill level. The Company is fully committed to ensuring equal pay opportunities for equal work regardless of color, race, sex, national origin, sexual orientation, religion, age, veteran status, disability, pregnancy, citizenship status, genetic information, or any other basis protected by federal, state, or local pay equity laws.

California → Use CA Fair Chance language.

Equal Opportunity Employer

TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

As an insurance company, we comply with certain federal, state and local laws such as the Violent Crime Control and Law Enforcement Act of 1994 (18 USC 1033(e)), which restricts our ability to employ individuals with certain types of criminal convictions. Where not restricted by law and for criminal history not covered by this law, the Company will consider qualified applicants with arrest or conviction history in compliance with applicable law such as the California Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance, the San Diego Fair Chance Ordinance, and the San Francisco Fair Chance Ordinance.

You do not need to disclose your criminal history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if the Company is concerned about a conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction or challenge the accuracy of the background report.