Senior Engineer, MDR

Tokio Marine HCC International; United States; Remote; USD 117,000 - 176,000; Full time

Job summary

Vector3, Inc. is launching a Managed Detection and Response (MDR) service for TMHCC CPLG, seeking a Senior Engineer to support MDR workflows with strong engineering expertise.

You will design, build, and optimize security automation, collaborate with the team, and help scale detection and response capabilities across enterprise environments. You will apply advanced security knowledge, contribute to engineering best practices, and mentor peers while delivering practical, reliable solutions for

Qualifications

• Minimum 4 year’s bachelor’s degree in cyber security, Computer Science, information Technology related degree.
• 4+ years of professional experience in security engineering teams developing security automation/SOAR capabilities.
• Experience deploying and administering endpoint security tooling (CrowdStrike, Sophos, SentinelOne) and working with cloud/platform security.

Responsibilities

• Design, build, and maintain scalable security applications, integrations, and automation frameworks for MDR services.
• Lead complex engineering initiatives from design through deployment, delivering innovative solutions.
• Develop automation to reduce toil and improve response times across security operations.
• Develop and maintain scripts, APIs, and tooling using Python, PowerShell, Bash, Go to streamline security operations.

Skills

Security engineering

Security automation

Scripting: Python

Scripting: PowerShell

Scripting: Bash

Go programming

Technical leadership

Education

Bachelor’s degree in cyber security, Computer Science, or IT related field

Tools

CrowdStrike

Sophos

SentinelOne

Active Directory / Microsoft Intune / MDM

Job description

Role Details

Job Title: Senior Engineer, MDR

Location: Remote, USA

Reports to: Director of Engineering

Employment Type: Full time

About Vector3

Vector3, Inc., is an incident response firm supportingTMHCC Cyber and Professional Lines Group (CPLG)****. Vector3 specializes in responding to Business Email Compromise (BEC) and Ransomware incidents, helping insured organizations investigate, contain, and recover from cyber related incidents. Building on our success in incident response, we are launching a Managed Detection and Response (MDR) service designed to protect our DFIR clients from future incidents. The MDR program will deliver proactive monitoring, detection, and prevention solutions — powered by tools like Sophos EDR/NDR , Microsoft 365 , and Google Workspace.

Job Summary

Join us in shaping the future of TMHCC-CPLG as a key contributor in our Managed Detection and Response (MDR) team, Vector3. You will leverage your engineering expertise to support managed detection and response workflows for MDR customers. You will work closely with your team through intricate engineering initiatives, enabling the MDR team to deliver more efficient and scalable detection and response capabilities.

Alongside your technical abilities, you effectively balance multiple priorities. You collaborate closely with your peers to enhance the team’s overall expertise and performance, ensuring the practices’ swift and effective response to cyber incidents.

Key Responsibilities

Relying on extensive security knowledge and advanced technical expertise, this role is accountable for the following responsibilities

Relying on advanced knowledge and strong leadership skills, this role is accountable for the following responsibilities:

• Security Engineering and Automation:
  • Design, build, and maintain scalable security applications, integrations, and automation frameworks that enhance Managed Detection and Response (MDR) services and improve operational efficiency.
  • Lead complex engineering initiatives from design through deployment, delivering innovative solutions to address evolving security threats and operational challenges.
  • Identify repetitive processes, operational bottlenecks, and manual tasks across security operations, then develop automation to reduce toil, increase consistency, and improve response times.
  • Develop and maintain scripts, APIs, and tooling using Python, PowerShell, Bash, Go, and related technologies to streamline security operations and infrastructure management.
  • Engineer and deploy software, security tools, and automation solutions across diverse enterprise environments, ensuring reliability, scalability, and maintainability.
• Teamwork and Client Engagement:
  • Foster a culture of innovation, continuous learning, and skill development within the engineering team.
  • Support the maintenance of operating procedures and best practices for the engineering team.
  • Maintain positive, professional insured/carrier relationships.
  • Communicate complex engineering concepts internally and externally.
• Technical Experience:
  • Stay informed about emerging engineering technologies and industry best practices.
  • Provide expert technical guidance on engineering methodologies, automation techniques and software development.
  • Occasionally, support complex digital forensic investigations, including analysis of system logs, network traffic, and endpoint data.

Competencies

Planning

• Contribute to the development of both short-term and long-term plans for designated area of the organization.

Technical Excellence

• Experience architecting performant asynchronous microservices with robust testing and observability built-in.
• Write, or is a major contributor to, technical reports and documentation.
• Peer review complex code to organizational architectural standards.

Cost Management

• Develop innovative ways to improve financials.

Business Controls and Policies

• Comply with all corporate policies and procedures.

Education

Minimum 4 Year’s bachelor’s degree in cyber security, Computer Science, information Technology related degree.

Certifications, Licenses, and Designations

Preferred advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus

Experience

4+ years former professional experience in security engineering teams, developing security automation and/or SOAR capabilities in support of security incident response, detection engineering, EDR platform support, or vulnerability management. Other experience in building robust applications in Python and fluent scripting in Bash and PowerShell.

Other

• Proven track record of success in executing complex engineering initiatives.
• Experience deploying and administering Endpoint Detection and response tooling such as Crowdstrike, Sophos, or SentinelOne.
• Ability to architect, develop, and execute automated threat hunts across an enterprise.
• Experience in advanced detection engineering and tuning signals across a wide array of data sources.
• Background in automating rote security and IT tasks.
• Programming experience in Bash, Python, PowerShell, or Go.
• Experience in deploying software and scripts across diverse IT environments.
• Experience with Active Directory, Microsoft Intune, or other MDM solutions.
• Experience with Vue, JavaScript, TypeScript, or AG Grid is a plus.
• Understanding of cloud platforms and security considerations within AWS (Amazon Web Services), Azure, Microsoft 365, and GCP (Google Cloud Platform).
• Superior organizational and analytical skills; demonstrated ability to manage multiple tasks simultaneously.
• Excellent communication and presentation skills to clearly and concisely communicate complex technical concepts to stakeholders.

Certification, Licenses, and Designations

2 years in leading active cybersecurity engagements, developing security automation and/or SOAR capabilities in support of security incident response, digital forensics, malware analysis or threat intelligence

Advanced degrees or certifications in security (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) or cloud engineering (AWS Certified Security, Azure Security Engineer, Google Professional Cloud Security Engineer, CCNA, MCSE are a plus.

California

Tokio Marine HCC is an equal opportunity employer that values diversity and inclusion. We offer competitive compensation, comprehensive benefits, and professional growth opportunities within a global organization.

The pay range for this position is$117,200-$175,800which includes geographic adjustments, where applicable. The pay range is the range THMCC, in good faith, believes is the range of compensation for this role at the timeof this posting. The hired applicant will be offered pay within the entire range based on the candidate’s geographic location, qualifications, work experience, education, and/or skill level. The Company is fully committed to ensuring equal pay opportunities for equal work regardless of color, race, sex, national origin,sexual orientation, religion, age, veteran status, disability, pregnancy, citizenship status, genetic information, or any other basis protected by federal, state, or local pay equity laws. You do not need to disclose your criminal history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if the Company is concerned about a conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction or challenge the accuracy of the background report.

The Company will consider for employment all qualified applicants, including

those with criminal histories, in a manner consistent with the requirements of applicable federal, state and local laws, such as the Violent Crime Control and Law Enforcement Act of 1994 (18 USC § 1033(e))(the “VCCLEA”), which restricts financial institutions and insurers such as TMHCC from employing individuals with certain types of criminal convictions. Where the hiring and employment of individuals is not restricted by the foregoing, the Company will consider qualified applicants with arrest or conviction history in compliance

with applicable law such as the California Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance, the San Diego Fair Chance Ordinance, and the San Francisco Fair Chance Ordinance.

As an insurance company, wecomply with certain federal, state and local laws such as the Violent Crime Control and Law Enforcement Actof 1994 (18 USC § 1033(e)), which restricts our ability to employ individuals with certain types of criminal convictions. Where not restricted by law and for criminal history not covered by this law, the Company willconsider qualified applicants with arrest or conviction history in compliance with applicable law.

Tokio Marine HCC offers a competitive salary and a generous employee benefit package that includes amongother benefits, subsidized medical, prescription, dental, vision and basic life and disability insurance,employee assistance program, paid parental leave, 401