Cyber Security Operations Center (SOC) Senior Technologist

Who Are We?

Taking care of our customers, our communities and each other. That’s the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 160 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Job Category

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range

$106,300.00 - $175,400.00

Target Openings

1

What Is the Opportunity?

Travelers Cybersecurity is offering Senior Technologist opportunity within our Security Operations Center (SOC). We are looking for an experienced cybersecurity professional, who will be responsible for taking a leading role in monitoring enterprise systems and performing incident response services in our 24x7x365 SOC. This is an on-call position that works with a skilled cybersecurity team to help protect the enterprise.

This role is a key member of our SOC, and will act as a subject matter expert, detecting, analyzing, and responding to alerts and other cybersecurity events alongside junior analysts. You must be willing to work in a 24x7x365 team environment and be in an on-call rotation, meaning you will be prepared to work evening, weekend, and holiday schedules as required to meet our objective of 24x7x365 availability. This role will frequently participate in broader projects, including cybersecurity initiatives, investigations, automation development, data analysis, scripting, and forms process improvement. Additionally, this role will routinely act as a mentor, seek for opportunities to improve team and incident response practices, and maintain the SOC knowledgebase. The ideal candidate will bring a background and experience in Cybersecurity staff management (the evaluation, hiring, and training of SOC staff), strong technical skills related to threat detection and response processes, as well as the curation and presentation of metrics & reporting for Senior Leadership. This position plays a key role within Travelers Cyber Incident Response team.

What Will You Do?

• Be a subject-matter expert within a team of trained Cybersecurity Professionals, spread across various countries and time zones, to protect and defend the enterprise environment.
• Leads alert-based incident response efforts in the SOC, including evaluation and deconstruction of phishing pages and malware (e.g., obfuscated code) through open-source and vendor provided tools.
• Work in a 24x7x365 environment, have a team-centric focus, and be prepared to work evening, weekend, and holiday schedules (as required) for incident response readiness.
• Lead SOC projects and associated workstreams.
• Participates and leads activities or team to resolve cyber incidents and ensure proper procedures are followed throughout lifecycle of an incident.
• Creates, debugs, modifies, and maintains SIEM rules written in KQL and SPL.
• Creates, debugs, modifies, and maintains automation and scripts, written in Python, PowerShell and other various languages.
• Drive onboarding of new technologies, alerts and associated response playbooks and procedures alongside partner Cybersecurity teams.
• Manage knowledge base, including creating, maintaining, and enforcing standard operating procedures (SOPs), threat intelligence, and other documentation.
• Develop metrics and dashboards for alert metrics, coverage, and efficacy to drive performance improvement measures.
• Manage quality assurance activities over alert response and operate feedback loop to correct deficiencies as necessary.
• Maintains records of security monitoring and incident response activities, utilizing case management and ticketing technologies.
• Provide operational support, troubleshooting and maintenance of cybersecurity related processes, controls, or products.
• Assists in coaching peers, developing team culture, and seeking opportunities to improve the team environment.
• Perform other duties as assigned.

What Will Our Ideal Candidate Have?

• Bachelor’s Degree in a STEM (Science, Technology, Engineering, Math) discipline preferred.
• Four years of releva