Cybersecurity Ops Technologist I

Who Are We?

Taking care of our customers, our communities and each other. That’s the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 170 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range$99,100.00 - $163,400.00

1

Cybersecurity operations is responsible for the identification, protection, detection, response and disruption of cybersecurity events across Travelers through critical analysis, threat intelligence gathering, and agile cybersecurity techniques to assess, support, and resolve cyber incidents. As a Cybersecurity Ops Technologist I, you will perform complex activities that impact the timely detection, identification, alerting and response of possible complex attacks, intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.What Will You Do?

• Use cyber defense tools for continual monitoring and quickly analyze alerts from various sources across the enterprise and determine possible causes of alerts.
• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Conduct research, analysis, and correlation across a wide variety of all source data sets broadly and create alerts and controls, as appropriate.
• If threat: Perform technical and nontechnical risk and vulnerability assessments of relevant technology focus areas and present risk mitigation approaches to management. Conduct network scouting threat hunting and vulnerability analyses of systems within a network.
• If Forensics: Perform file system forensic analysis and ensure appropriate documentation with the ability to answer questions based on a technical examination.
• Perform other duties as assigned.

What Will Our Ideal Candidate Have?

• Experience with Proofpoint platform (ie. TAP, TRAP, Secure Email, Adaptive DLP, etc).
• Experience with email security triage, endpoint messaging, DMARC and SPF.
• Experience working in an Email security group or Email focused response pocket of a SOC. 
• Degree or Certificate in Cybersecurity, Computer Science or related field.
• 3 years of experience in cybersecurity with experience in recognizing and categorizing types of vulnerabilities and associated attacks and applying cybersecurity and privacy principles to organizational requirements.
• Experience using incident handling methodologies.
• Technical knowledge of computer networking concepts and protocols, network security methodologies, cyber threats and vulnerabilities, authentication, authorization, and access control methods.
• Knowledge of operational impacts of cybersecurity lapses.
• Experience with cyber defense and vulnerability assessment tools and capabilities and an understanding of how a security system should work and how changes would impact outcomes.
• Ability to effectively communicate meaningful insights regarding the organization’s threat environment in order to improve its risk management posture.

What is a Must Have?

• Bachelor’s degree or its equivalent in work experience.
• 2 years of experience working in a Technology related field or role.