Senior Incident Response Operations Engineer in Mundelein

Energy Jobline ZR; Mundelein (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

Tokio Marine Global Services (TMGS) in the US seeks a Senior Incident Response/Operations Engineer to maintain security infrastructure, hunt threats, and respond to incidents. You will help design, install, configure, and continuously improve global security operations services across the organization.

You will lead investigations, collaborate with cross-functional teams, develop threat detection rules and SOAR playbooks, and automate security processes to enhance detection, response times, and

Qualifications

• 8+ years in an operational cybersecurity role.
• 3+ years hands-on incident response.
• Experience developing and presenting incident/status updates for leadership.
• Experience in threat hunting using intelligence data to investigate threats.
• Experience analyzing network and host-based security events.
• Proficient with Windows or Linux system administration.
• Proficient with PowerShell or bash.
• Proficient with Windows Event Forwarding (WEF) or syslog.
• Proficient in Python, Perl, or Ruby.
• Knowledge of TCP/IP and networking.
• Strong communication and ownership.

Responsibilities

• Conduct security investigations and lead incident response in a cross-functional environment.
• Monitor security systems and infrastructure for performance and reliability.
• Implement and manage security tools and processes to detect and mitigate threats.
• Maintain robust security feeds and ensure data integrity.
• Develop threat detection rules and SOAR playbooks.
• Refine operational metrics and SLIs for Security Operations and Incident Response.
• Identify automation opportunities to improve security operations.
• Communicate complex technical information to technical and non-technical audiences.
• Collaborate with partner security teams to strengthen the organization’s security posture.

Skills

Incident response

Threat hunting

Security investigations

PowerShell

Python

Bash

Windows admin

Linux admin

SOAR

TCP/IP

Threat intelligence

Communication

Tools

Ollama

Job description

Job Description

Marketing Statement

Tokio Marine Global Services (TMGS) is the US-based operation of Tokio Marine Holdings, one of the largest global insurance groups in the world, headquartered in Tokyo, Japan. TMGS accelerates synergy and collaboration across the Tokio Marine Group by delivering core infrastructure services in the areas of actuarial services, internal audit, investor relations, and information technology. TMGS supports Tokio Marine’s operations across 46 countries and regions and more than 50,000 employees worldwide, serving as a hub for global innovation through a strong people strategy and sustainable international growth.

Job Summary:

As the Senior Incident Response/Operations Engineer under the Global Fusion Center US Operations, you will handle day-to-day maintenance of security infrastructure in addition to proactive threat hunting and incident response. Your role will be key in the development, installation, configuration, and continuous improvement of the global security operations service and be critical in the response to external and internal threats. This position will require a blend of technical expertise, analytical skills, and effective communication abilities to ensure swift and efficient handling of security events. You will also be expected to identify opportunities to automate and improve effectiveness of operations.

Essential Job Functions:

• Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution
• Monitor security systems and infrastructure to support best performance and reliability
• Implement and manage security tools and processes, to detect and mitigate threats
• Maintain robust security feeds and ensure data integrity
• Proactively look for threats working with level one analysts, affected teams and security vendors.
• Author threat detection rules and subsequent SOAR playbooks
• Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services
• Identify and implement security process automation, continuously improving processes and tools.
• Be a technical subject matter expert for Security Operations and incident Response services.
• Provide expertise to partnered security teams in mitigation of those threats
• Communicate complex technical information clearly and concisely to both technical and non-technical audiences
• Collaborate with partner security teams to offer guidance and bolster support of the organization’s security infrastructure
• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work
• Influence and align the team’s vision and strategy

Other Functions:

• Follow proper internal controls as necessary to conduct job functions and/or carry out responsibilities and/or administrative activities at the Company
• Perform special projects and other duties as may be assigned
• Establish and build strong working relations and partnerships with other teams, Group Companies, and senior management

Qualifications:

• 8 or more years of experience in an operational cybersecurity role
• 3 or more years of hands-on incident response experience
• Experience developing and delivering on incident and program status for leadership
• Experience in threat hunting including leveraging intelligence data to proactively find and iteratively investigate suspicious behavior across networks and systems
• Experience analyzing network and host-based security events
• Proficient System Administration with either Microsoft Windows or Linux
• Proficient with CLI shells such as PowerShell or bash
• Proficient with Security Log infrastructure configuration such as Windows Event Forwarding (WEF) or syslog
• Proficient in an interpreted such as Python, Perl, or Ruby
• Familiarity with regular expressions
• Familiarity with Large Models tools such as Ollama
• Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux
• Knowledge of networking technologies, specifically TCP/IP and the related protocols
• Understanding of networks, operating systems, and architecture and how they affect the security posture of a company
• Strong problem-solving aptitude
• Demonstrated ownership of projects or tasks
• Strong verbal and written communication skills
• Demonstrated professionalism and a calm demeanor while dealing with complex or high-urgency situations

EEO Statement:

Tokio Marine Group of Companies (including, but not limited to the Philadelphia Insurance Companies, Tokio Marine America, Inc., TMNA Services, LLC, TM Claims Service, Inc. and First Insurance Company of Hawaii, Ltd.) is an Equal Opportunity Employer. In order to remain competitive we must attract, develop, motivate, and retain the most qualified employees regardless of , , , , , , or , family circumstances, life experiences, marital status, military status, and/or any other status protected by law.