Security Operations Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $104.3k - $157.9k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Tokio Marine HCC

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

📦 Logistics

💼 Consulting

✈️ Travel

Logistics • Consulting • Travel

Tokio Marine HCC is a global specialty insurance and reinsurance group that underwrites more than 100 classes of specialty insurance across 180+ countries. The company offers a wide range of commercial products—including accident & health, aviation, casualty, cyber & tech, energy, marine, travel, crop, and transactional risk—serving brokers, enterprises, and program partners. With strong financial ratings (AM Best A++ / Fitch AA- / S&P A+) and a multi-billion dollar premium base, Tokio Marine HCC combines underwriting expertise, program management, and claims services as part of the Tokio Marine Group.

📋 Description

• Review and investigate MDR alerts requiring customer follow-up. • Support incident validation, scoping, and remediation activities. • Conduct log analysis and security investigations. • Assist customers with containment and recovery validation. • Document investigative findings and recommendations. • Support deployment and administration of Sophos MDR technologies. • Assist with endpoint onboarding, integrations, and configuration activities. • Troubleshoot technical issues involving MDR platforms. • Validate policy configurations and security controls. • Maintain technical documentation and operational runbooks. • Support Cyber Hygiene assessments and compliance reviews. • Assist with security maturity evaluations. • Review customer environments for security improvement opportunities. • Provide technical recommendations aligned to security best practices. • Work closely with TAMs on customer engagements. • Coordinate with Sophos MDR teams during investigations. • Support DFIR personnel during escalated incidents. • Participate in service improvement initiatives. • Prioritize investigations, technical support requests, and operational activities. • Prepare technical reports, investigation summaries, and operational documentation. • Analyze security events, endpoint telemetry, cloud audit logs, network traffic, and security platform data. • Validate alerts, identify root causes, and recommend remediation actions. • Maintain awareness of emerging threats, attack techniques, and cybersecurity best practices. • Comply with corporate security policies, confidentiality requirements, and regulatory obligations. • Contribute to operational processes and technical playbooks. • Partner with Technical Account Managers, Sophos MDR personnel, internal engineering teams, and DFIR consultants during investigations and escalations. • Support knowledge sharing and continuous improvement across the Managed Services organization.

🎯 Requirements

• Minimum 4 Year Bachelors Degree in Cyber security, Computer Science, information Technology related degree. • 3+ years in security operations, cybersecurity engineering, SOC operations, incident response, or IT security. • Knowledge of Microsoft 365, Google Workspace, endpoint security, network security technologies, log analysis, and security investigation methodologies. • Strong troubleshooting and analytical skills. • Experience supporting MSSP, MDR, or SOC environments. • Familiarity with NIST CSF, CIS Controls, and common compliance frameworks. • Experience supporting Microsoft Defender, Sophos, CrowdStrike, SentinelOne, or similar platforms. • Professional proficiency in Spanish (written and verbal) with the ability to communicate technical and security concepts to Spanish-speaking customers. • Ability to effectively communicate technical and security concepts to both technical and non-technical audiences in English; Spanish language proficiency is a plus. • Preferred Security+, CySA+, SC-200, Sophos Engineer, or similar certifications a plus. • DFW based candidates preferred. • Detail-oriented and process-driven. • Collaborative team player.

🏖️ Benefits

• Competitive salary and employee benefit package • Strong learning culture • Growth perspectives • 6% 401K match • 20 days of PTO and 2 Floating Days • Paid parental leave • An opportunity to love what you do