Senior Cyber Threat Analyst

Tokio Marine HCC

2d•$109,500 - $164,300•Remote

About The Position

Join us in shaping the future of TMHCC-CPLG as a key contributor in our cyber extortion and threat intelligence function, Vector3. You will lead threat actor communications and negotiation support for ransomware and cyber extortion engagements, helping shape case strategy through direct communication, disciplined documentation, and sound judgment. You will also leverage advanced analytical skills to understand threat actors, campaigns, tactics, techniques, and procedures, while providing intelligence support that strengthens incident response and case outcomes. You will work closely with your team and engagement leads to turn direct communications and threat activity into actionable support that helps the organization anticipate, understand, and respond to adversaries.

Requirements

Minimum 4 Year's bachelor's degree in cyber security, Computer Science, Information Technology related degree.
4+ years of professional experience in cyber incident response, threat intelligence, negotiations, investigations, or related analytical work.
Experience leading threat actor communications in ransomware or cyber extortion cases.
Strong writing and presentation skills with the ability to communicate clearly under pressure.
Ability to manage multiple complex matters simultaneously and respond to urgent requests.
Familiarity with threat actor behavior, TTPs, malware families, and campaign activity using open-source and commercial intelligence sources.

Nice To Haves

Advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus.

Responsibilities

Lead written communications and negotiation support for ransomware and cyber extortion engagements under the direction of counsel.
Develop communication strategy, draft response language, and maintain disciplined negotiation records that support case objectives.
Track demands, deadlines, concessions, proof-of-possession requests, and actor behavior to help the engagement team assess leverage and next steps.
Review and refine communications prepared by junior analysts to ensure they are clear, professional, accurate, and aligned with case strategy.
Research, analyze, and track threat actors, extortion groups, malware families, campaigns, and emerging adversary infrastructure.
Correlate communications, indicators, and intelligence to identify patterns in actor behavior, tactics, techniques, and procedures.
Provide intelligence support to active investigations and time-sensitive events so response teams can make informed decisions.
Maintain actor profiles, negotiation notes, intelligence artifacts, and reference material in approved repositories.
Mentor junior analysts and help establish consistent standards for negotiation support, documentation, and intelligence reporting.
Improve communication workflows, intelligence collection, validation, and dissemination processes for scale and repeatability.
Collaborate with DFIR, legal, insurance, and client-facing teams to ensure communications are timely, relevant, and actionable.