Senior Incident Response Operations Developer - Remote

Marketing Statement:

Tokio Marine North America Services (TMNAS) provides professional support services to Tokio Marine Group companies in the United States, including Tokio Marine America, First Insurance Company of Hawaii, and Philadelphia Insurance Companies. Customer service is our focus and our passion! Tokio Marine North America Services adds value in all that we do, providing the best professional service to our business partners, allowing them to achieve their goals. Our talented team delivers actuarial, audit, corporate communications, financial and investment, human capital services, information technology, legal, and payroll expertise to our customers.

Job Summary:

As the Senior Incident Response/Operations Developer under the Global Fusion Center US Operations, you will handle day-to-day maintaining of security infrastructure in addition to proactive threat hunting and incident response.  Your role will be key in the development, installation, configuration, and continuous improvement of the global security operations service and be critical in the response to external and internal threats.  You will also be responsible for hands-on development and solution project leadership.  This position will require a blend of technical expertise, analytical skills, and effective communication abilities to ensure swift and efficient handling of security events.  You will also be expected to identify opportunities to automate and improve the effectiveness of operations.

Essential Job Functions:

• Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution
• Monitor security systems and infrastructure to support best performance and reliability
• Implement and manage security tools and processes, to detect and mitigate threats
• Maintain robust security feeds and ensure data integrity
• Proactive look for threats working with level one analysts, affected teams and security vendors
• Author threat detection rules and subsequent SOAR playbooks
• Deploy, automate, maintain, and manage cloud infrastructure to ensure security, performance, and availability of production system
• Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services
• Identify and implement security process automation, continuously improving processes and tools
• Be a technical subject matter expert for Security Operations Development and Automation
• Communicate complex technical information clearly and concisely to both technical and non-technical audiences
• Collaborate with partner security teams to offer guidance and bolster support of the organization’s security infrastructure
• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work
• Influence and align the team’s vision and strategy

Other Functions:

• Follow proper internal controls as necessary to conduct job functions and/or carry out responsibilities and/or administrative activities at the Company
• Perform special projects and other duties as may be assigned
• Establish and build strong working relations and partnerships with other teams, Group Companies, and senior management

Qualifications:

• 5 or more years of experience in developer role
• 2 or more years of hands-on experience with a cybersecurity focus
• Experience building and operating CI/CD – build, deploy, release automation through pipelines
• Proficient with CLI shells such as PowerShell or bash
• Proficient in an interpreted language such as Python, Perl, Rust, or Go
• Proficient with cloud environments (AWS, Azure, GCP) and cloud hardening
• Familiarity with regular expressions
• Familiarity with Large Language Model tools such as Ollama
• Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux
• Knowledge of operating system technology stacks for Linux and Microsoft Windows 
• Knowledge of networking technologies, specifically TCP/IP and the related protocols
• Knowledge of containerization and orchestration technologies, such as Docker and Kubernetes
• Understanding of how networks, operating systems, and architecture affect the security posture of a company
• Demonstrate a strong problem-solving aptitude
• Demonstrate ownership of projects or tasks
• Everything as code mindset and familiar with gitops practices
• Strong verbal and written communication skills
• Poise and ability to act calmly and competently

Salary range $135,000 to $155,000. Ultimate salary offered will be based on factors such as applicant experience and geographic location. Our company offers a competitive benefits package and bonus eligibility on top of base.

EEO Statement:

Tokio Marine Group of Companies (including, but not limited to the Philadelphia Insurance Companies, Tokio Marine America, Inc., TMNA Services, LLC, TM Claims Service, Inc. and First Insurance Company of Hawaii, Ltd.) is an Equal Opportunity Employer. In order to remain competitive we must attract, develop, motivate, and retain the most qualified employees regardless of age, color, race, religion, gender, disability, national or ethnic origin, family circumstances, life experiences, marital status, military status,  sexual orientation and/or any other status protected by law.