Job description

Crum & Forster (C&F) provides market leading property & casualty, accident & health, specialty and standard commercial lines insurance solutions. A true underwriting company, we have a 200-year history of helping our customers manage risk with laser-focused expertise, integrity and discipline. Our people are empowered to make decisions and problem-solve with you smartly and swiftly. Our annual gross written premium is 6.2 billion. C&F enjoys a financial strength rating of "A+" (Superior) by AM Best. Our most valuable asset is our people. We have 3000 employees, and locations throughout the United States and India. With our employee-first focus, the Company is consistently recognized as a great place to work, earning multiple workplace and wellness awards, including the Great Place to Work® Award, Fortune 100 Best Companies to Work For, Fortune Best Workplaces for Parents, Fortune Best Workplaces for Millennials, and many others. C&F is part of Fairfax Financial Holdings. For more information about C&F, please visit our website: www.cfins.com The Crum & Forster Cyber & Information Security team is seeking a Senior Cybersecurity Enginer/Analyst with the Threat Detection and Response team. Reporting to the Threat Detection & Response Director, this role will be responsible for partnering with our Managed Services SOC to ensure efficient and effective capabilities in identifying malicious activity, investigating escalated alerts to closure, and facilitating Incident Response duties. You will work with a team of professional Security Analysts leveraging Next-Gen security tools to help detect and remediate cyber threats. What you will do: • Triage escalated Cyber alerts and coordination with internal stakeholders via ticketing. • Investigate email, host, and network-based cybersecurity threats. • Act as a point of contact for company employees reporting cybersecurity concerns. • Identify and recommend opportunities to refine detection capabilities and reduce False Positives. • Coordinate with various system and application owners to verify and remediate cyber threats. • Develop and implement Security Orchestration & Automation. • Develop, Update, and Publish Standard Operating Procedures. • Adhere to, update, and maintain Cybersecurity playbooks. What you will bring to C&F: • 7+ years Cybersecurity related experience in a SOC. • Previous experience working in a Security Operations Center and Engineering roles. • Understanding and maintaining familiarity with threat Intelligence news and Vulnerabilities. • Experience investigating phishing and email related attacks. • Experience with Windows and Linux. • Fundamental understanding of system and network security principles and technology. • Fundamental understanding of Networking – TCP/IP and other protocols. • Ability to interface with a wide audience of technical and non-technical personnel. • Understanding of the Cyber Kill Chain and MITRE/ATT&CK Framework. • Ability to prioritize and manage workloads and deadlines on a tactical and project-oriented level. • Excellent written and verbal communication skills. • Self-starter who is motivated and driven to learn. • Bachelor’s degree in a technical discipline or equivalent experience. • Experience, knowledge and improvements of SIEM, SOAR, Email Security, Cloud Security platforms. • Experience with scripting automation in Python or other languages. • Experience in SIEM, IDS/IPS, Firewalls, Endpoint Detection/Response and Email Security • Experience performing risk assessments, penetration testing and tabletop exercises. • Any Security focused Certifications. • Experience in protecting, investigating and responding to Cloud Security • Technical writing experience. • Prior experience and/or certifications in AWS, Azure, and/or GCP is desired but not required. • Experience performing risk assessments, penetration testing and tabletop exercises is desired but not required. • Any Security focused Certifications is desired but not required. #LI-MS #LI-REMOTE • Competitive compensation package • Generous 401K employer match • Employee Stock Purchase plan with employer matching • Generous Paid Time Off • Excellent benefits that go beyond health, dental & vision. Our programs are focused on your whole family’s wellness, including your physical, mental and financial wellbeing • A core C&F tenet is supporting your career development, so we provide a wealth of ways for you to keep learning, which may include tuition reimbursement, industry-related certifications and professional training to keep you progressing on your chosen path • A dynamic, ambitious, fun and exciting work environment • We believe you do well by doing good and want to encourage a spirit of social and community responsibility, matching donation program, volunteer opportunities, and an employee-driven corporate giving program that lets you participate and support your community At C&F you will BELONG If you require special accommodations, please let us know. We value inclusivity and diversity. We are committed to equal employment opportunity and welcome everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you require special accommodations, please let us know. Belonging at C&F, is a mindset. It’s about fostering a culture of inclusion and connection, where everyone feels valued, heard, and empowered to thrive and where our social impact efforts help strengthen the communities where we live and work. For California Residents Only: Information collected and processed as part of your career profile and any job applications you choose to submit are subject to our privacy notices and policies, visit cfins.com for more information. Crum & Forster is committed to ensuring a workplace free from discriminatory pay disparities and complying with applicable pay equity laws. Salary ranges are available for all positions at this location, taking into account roles with a comparable level of responsibility and impact in the relevant labor market and these salary ranges are regularly reviewed and adjusted in accordance with prevailing market conditions. The annualized base pay for the advertised position, located in the specified area, ranges from a minimum of $100,700 to a maximum of $145,000. The actual compensation is determined by various factors, including but not limited to the market pay for the jobs at each level, the responsibilities and skills required for each job, and the employee’s contribution (performance) in that role. To be considered within market range, a salary is at or above the minimum of the range. You may also have the opportunity to participate in discretionary equity (stock) based compensation and/or performance-based variable pay programs.

Requirements

Must-haves

C&F is part of Fairfax Financial Holdings. For more information about C&F, please visit our website: www.cfins.com
Triage escalated Cyber alerts and coordination with internal stakeholders via ticketing.
Investigate email, host, and network-based cybersecurity threats.
Act as a point of contact for company employees reporting cybersecurity concerns.
Identify and recommend opportunities to refine detection capabilities and reduce False Positives.
Coordinate with various system and application owners to verify and remediate cyber threats.
Develop and implement Security Orchestration & Automation.
Develop, Update, and Publish Standard Operating Procedures.
Adhere to, update, and maintain Cybersecurity playbooks.
7+ years Cybersecurity related experience in a SOC.
Previous experience working in a Security Operations Center and Engineering roles.
Understanding and maintaining familiarity with threat Intelligence news and Vulnerabilities.
Experience investigating phishing and email related attacks.
Experience with Windows and Linux.
Fundamental understanding of system and network security principles and technology.
Fundamental understanding of Networking – TCP/IP and other protocols.
Ability to interface with a wide audience of technical and non-technical personnel.
Understanding of the Cyber Kill Chain and MITRE/ATT&CK Framework.
Ability to prioritize and manage workloads and deadlines on a tactical and project-oriented level.
Excellent written and verbal communication skills.
Self-starter who is motivated and driven to learn.
Bachelor’s degree in a technical discipline or equivalent experience.
Experience, knowledge and improvements of SIEM, SOAR, Email Security, Cloud Security platforms.
Experience with scripting automation in Python or other languages.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonawsazuregcpgo

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off

Wellness