HCC Specialty
HCC Specialty

Senior Cyber Threat Analyst

Remote • Posted 7 hours ago • Updated 7 hours ago
Full Time
Remote
USD $109,500.00 - 164,300.00 per year
Fitment

Dice Job Match Score™

📊 Calculating match score...

Job Details

Skills

  • Customer Service
  • Innovation
  • Accountability
  • Leadership
  • Research
  • Team Leadership
  • Process Improvement
  • Mentorship
  • Communication
  • Workflow
  • Intelligence Collection
  • Collaboration
  • Legal
  • Customer Facing
  • Documentation
  • Cost Management
  • Policies and Procedures
  • Cyber Security
  • Computer Science
  • Information Technology
  • CISSP
  • CISM
  • GCFA
  • GCIH
  • Incident Management
  • Threat Analysis
  • Negotiations
  • Analytical Skill
  • Presentations
  • Management
  • Malware Analysis
  • Open Source
  • SAP BASIS
  • Reporting
  • Law Enforcement
  • Finance
  • Regulatory Compliance
  • Law
  • Recruiting
  • LOS
  • Writing
  • Insurance
  • Military

Summary

  • Job Title: Senior Cyber Threat Analyst
    Location: Remote, USA
    Reports to: Managing Director
    Employment Type: Full time
    Job Req ID: 2026
    Req Begin Date: 8/10/2026
    About Vector3
    Vector3, Inc., is an incident response firm supporting TMHCC Cyber and Professional Lines Group (CPLG) Vector3 specializes in responding to Business Email Compromise (BEC) and Ransomware incidents, helping insured organizations investigate, contain, and recover from cyber events.
    About TMHCC
    Tokio Marine HCC (TMHCC) brings 50 years of service to the specialty insurance industry, today offering over 100 products to commercial customers in 180 countries around the world. Every policy we write is special, enabling our clients to do amazing things. From insuring the crops that feed us to the rock concerts that entertain us, to rescuing international travelers in trouble.
    Organic growth and over 60 successful acquisitions have grown our 2023 Gross Written Premium (GWP) to over $7.5 Billion. Our workforce has grown to 4,300 worldwide ... big, but not so big that you cannot make a difference. Our Good Company values, including integrity, empowerment, and commitment to customer service, and a culture of innovation, communication, and collaboration make TMHCC a great place to work.

    What We Offer
    • Competitive salary and employee benefit package
    • Strong learning culture
    • Growth perspectives
    • 6% 401K match
    • 20 days of PTO and 2 Floating Days
    • Paid parental leave
    • An opportunity to love what you do

    Job Summary

    Join us in shaping the future of TMHCC-CPLG as a key contributor in our cyber extortion and threat intelligence function, Vector3. You will lead threat actor communications and negotiation support for ransomware and cyber extortion engagements, helping shape case strategy through direct communication, disciplined documentation, and sound judgment. You will also leverage advanced analytical skills to understand threat actors, campaigns, tactics, techniques, and procedures, while providing intelligence support that strengthens incident response and case outcomes.

    You will work closely with your team and engagement leads to turn direct communications and threat activity into actionable support that helps the organization anticipate, understand, and respond to adversaries.

    Key Responsibilities

    Relying on extensive security knowledge and advanced technical expertise, this role is accountable for the following responsibilities

    Relying on advanced knowledge and strong leadership skills, this role is accountable for the following responsibilities:

    Threat Actor Communications and Negotiation Leadership:
    • Lead written communications and negotiation support for ransomware and cyber extortion engagements under the direction of counsel.
    • Develop communication strategy, draft response language, and maintain disciplined negotiation records that support case objectives.
    • Track demands, deadlines, concessions, proof-of-possession requests, and actor behavior to help the engagement team assess leverage and next steps.
    • Review and refine communications prepared by junior analysts to ensure they are clear, professional, accurate, and aligned with case strategy.

    Threat Intelligence and Adversary Analysis:
    • Research, analyze, and track threat actors, extortion groups, malware families, campaigns, and emerging adversary infrastructure.
    • Correlate communications, indicators, and intelligence to identify patterns in actor behavior, tactics, techniques, and procedures.
    • Provide intelligence support to active investigations and time-sensitive events so response teams can make informed decisions.
    • Maintain actor profiles, negotiation notes, intelligence artifacts, and reference material in approved repositories.

    Team Leadership and Process Improvement:
    • Mentor junior analysts and help establish consistent standards for negotiation support, documentation, and intelligence reporting.
    • Improve communication workflows, intelligence collection, validation, and dissemination processes for scale and repeatability.
    • Collaborate with DFIR, legal, insurance, and client-facing teams to ensure communications are timely, relevant, and actionable.

    Competencies

    Planning
    • Contribute to the development of both short-term and long-term plans for designated area of the organization.

    Technical Excellence
    • Experience leading threat actor communications and producing intelligence products that inform decisions during active cyber incidents.
    • Write, or is a major contributor to, technical reports and documentation.
    • Analyze complex threat data and present findings in a clear and useful manner for multiple audiences.

    Cost Management
    • Develop innovative ways to improve financials.

    Business Controls and Policies
    • Comply with all corporate policies and procedures.

    Education

    Minimum 4 Year's bachelor's degree in cyber security, Computer Science, Information Technology related degree.

    Certifications, Licenses, and Designations

    Preferred advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus

    Experience

    4+ years of professional experience in cyber incident response, threat intelligence, negotiations, investigations, or related analytical work.

    Other
    • Experience leading threat actor communications in ransomware or cyber extortion cases.
    • Strong writing and presentation skills with the ability to communicate clearly under pressure.
    • Ability to manage multiple complex matters simultaneously and respond to urgent requests.
    • Familiarity with threat actor behavior, TTPs, malware families, and campaign activity using open-source and commercial intelligence sources.
  • Additional Job Description

    Pay Transparency
    The pay range for this position is $109,500-$164,300 which includes geographic adjustments, where applicable. The pay range is the range THMCC, in good faith, believes is the range of compensation for this role at the time of this posting. The hired applicant will be offered pay within the entire range based on the candidate's geographic location, qualifications, work experience, education, and/or skill level. The Company is fully committed to ensuring equal pay opportunities for equal work regardless of color, race, sex, national origin, sexual orientation, religion, age, veteran status, disability, pregnancy, citizenship status, genetic information, or any other basis protected by federal, state, or local pay equity laws.
    California Use CA Fair Chance language.
    The Company will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable federal, state and local laws, such as the Violent Crime Control and Law Enforcement Act of 1994 (18 USC
    • 1033(e))(the "VCCLEA"), which restricts financial institutions and insurers such as TMHCC from employing individuals with certain types of criminal convictions. Where the hiring and employment of individuals is not restricted by the foregoing, the Company will consider qualified applicants with arrest or conviction history in compliance with applicable law such as the California Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance, the San Diego Fair Chance Ordinance, and the San Francisco Fair Chance Ordinance.]

    As an insurance company, we comply with certain federal, state and local laws such as the Violent Crime Control and Law Enforcement Act of 1994 (18 USC
    • 1033(e)), which restricts our ability to employ individuals with certain types of criminal convictions. Where not restricted by law and for criminal history not covered by this law, the Company will consider qualified applicants with arrest or conviction history in compliance with applicable law.

    You do not need to disclose your criminal history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if the Company is concerned about a conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction or challenge the accuracy of the background report. The Company will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable federal, state and local laws, such as the Violent Crime Control and Law Enforcement Act of 1994 (18 USC
    • 1033(e))(the "VCCLEA"), which restricts financial institutions and insurers such as TMHCC from employing individuals with certain types of criminal convictions. Where the hiring and employment of individuals is not restricted by the foregoing, the Company will consider qualified applicants with arrest or conviction history in compliance with applicable law such as the California Fair Chance Act, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance, the San Diego Fair Chance Ordinance, and the San Francisco Fair Chance Ordinance.]

    Applying our Mind Over Risk philosophy to writing insurance allows our customers to take on opportunity with confidence. That philosophy defines our way of thinking, unites us as a team, and differentiates us from our competitors. We are much more than just an insurance company; we are a good company.
    Equal Opportunity Employer
    TMHCC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.
    #CPLG1

    #VA-LI
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: RTX12d17a
  • Position Id: 82d4179187c04f3a704d93986228e654
  • Posted 7 hours ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Cyber Security Analyst

Remote

•

13d ago

Full-time, Third Party

100,000 - 140,000

Cyber Threat Hunter

Remote or Bethesda, Maryland

•

Today

Full-time

USD 150,000.00 - 180,000.00 per year

LEAD INFORMATION SECURITY ENGINEER-FEDERAL MB

Remote or Maryland

•

Today

Full-time

USD 105,786.00 - 141,047.00 per year

SR LEAD INFORMATION SECURITY ENGINEER

Remote

•

Today

Full-time

USD 132,232.00 - 176,310.00 per year

Search all similar jobs
Remote jobs at HCC Specialty