Senior Engineer, MDR

Tokio Marine HCC

1d•$109,500 - $164,300

About The Position

Vector3, Inc. is an incident response firm supporting TMHCC Cyber and Professional Lines Group (CPLG). It specializes in responding to Business Email Compromise (BEC) and ransomware incidents, helping insured organizations investigate, contain, and recover from cyber events. The Senior Engineer, MDR takes a lead role in shaping the digital forensics and incident response practice for TMHCC-CPLG insureds. This player-coach position combines technical expertise and leadership to drive engineering initiatives that improve the scale, speed, and precision of investigations. The role guides engineers through hands-on problem-solving, develops scalable solutions for evolving threats, refines consulting capabilities, and mentors the team to improve performance in high-stakes environments.

Requirements

Bachelor’s degree (minimum four years) in cybersecurity, computer science, information technology, or a related field, or relevant professional work experience.
Three years of prior professional experience leading and managing security engineering teams and developing security automation and/or SOAR capabilities supporting security incident response, digital forensics, malware analysis, or threat intelligence.
Experience managing active cybersecurity engagements, including security incident response and digital forensics.
Proven track record managing complex engineering initiatives.
Experience conducting security investigations in Linux and Windows environments.
Understanding of cloud platforms and security considerations in AWS, Azure, Microsoft 365, and GCP.
Proficient scripting or programming skills in PowerShell, Bash, Python, Go, or Rust.
Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or CircleCI.
Experience with containerization technologies such as Docker and Kubernetes.
Experience with middleware or SOAR platforms such as Tines, Splunk, Swimlane, or Cortex XSOAR.
Experience using RESTful APIs for security automation.
Experience with EDR solutions such as Defender, SentinelOne, or CrowdStrike.
Experience with threat intelligence platforms or open-source solutions.
Experience with malware analysis methodologies.
Experience administering enterprise security tools and databases, including SIEM, IAM, EDR, firewalls, IDS/IPS, VPN, data warehouses, and DLP.
Experience with data backup and recovery, data replication, and data archival technologies.
Experience with hypervisor technologies such as VMware or MS Hyper-V.
Strong understanding of cybersecurity legal and regulatory frameworks, such as PCI, NIST CSF, or other industry-specific regulations.
Excellent communication and presentation skills for clearly and concisely explaining complex technical findings to clients and stakeholders.
Strong leadership abilities, including motivating and mentoring team members.
Superior organizational and analytical skills, with the ability to manage multiple tasks simultaneously.
Knowledge of industry changes, legal updates, and technical developments related to the Company’s business area.
Advanced proficiency with Microsoft Office, including Excel, Access, PowerPoint, and Word.
Able to operate a computer and other devices; close vision and ability to adjust focus, such as when reading a computer screen.
May need to remain stationary for extended periods and move up to 10 pounds.
Regular travel of up to 15% of the time.

Nice To Haves

Advanced degree or security certification such as CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, or CCE.
Cloud engineering certification such as AWS Certified Security, Azure Security Engineer, Google Professional Cloud Security Engineer, CCNA, or MCSE.

Responsibilities

Assign tasks, delegate responsibilities, and mentor team members.
Support the development and maintenance of engineering-team operating procedures and best practices.
Maintain positive, professional relationships with insureds and carriers.
Foster innovation, continuous learning, and skill development within the engineering team.
Understand insured needs and tailor strategies to business risks and compliance requirements.
Communicate complex engineering concepts internally and externally.
Develop and maintain engineering automation supporting incident response plans aligned with industry best practices.
Stay informed about emerging engineering technologies and industry best practices.
Understand digital forensics methodologies for evidence collection, analysis, and reporting.
Provide technical guidance on engineering methodologies, automation, software development, and recovery techniques.
Occasionally support complex digital forensic investigations, including analysis of system logs, network traffic, and endpoint data.
Contribute to short- and long-term plans for the designated organizational area.
Communicate team plans and results at all organizational levels, internally and externally.
Write or substantially contribute to technical reports and contractual documents, and present informational briefings.
Develop innovative ways to improve financials.
Comply with corporate policies and procedures.