Senior Cyber Threat Analyst

About this role

• Job Title: Senior Cyber Threat Analyst Location:   Remote, USA   Reports to: Managing Director Employment Type:   Full time Job Req ID:   2026 Req Begin Date:  8 /10/2026 About Vector3 Vector3, Inc., is an incident response firm   supporting   TMHCC Cyber and Professional Lines Group (CPLG) .   Vector3 specializes in responding to   Business Email Compromise (BEC)   and   Ransomware   incidents, helping insured organizations investigate, contain, and recover from cyber events. About TMHCC Tokio Marine HCC (TMHCC) brings 50 years of service to the specialty insurance industry, today offering over 100 products to commercial customers in 180 countries around the world. Every policy we write is special, enabling our clients to do amazing things. From insuring the crops that feed us to the rock concerts that entertain us, to rescuing international travelers in trouble. Organic growth and over 60 successful acquisitions have grown our 2023 Gross Written Premium (GWP) to over $7.5 Billion. Our workforce has grown to 4,300 worldwide … big, but not so big that you cannot make a difference. Our Good Company values, including integrity, empowerment, and commitment to customer service, and a culture of innovation, communication, and collaboration make TMHCC a great place to work.

What We Offer • Competitive salary and employee benefit package • Strong learning culture • Growth perspectives • 6% 401K match • 20 days of PTO and 2 Floating Days • Paid parental leave • An opportunity to love what you do

Job Summary Join us in shaping the future of TMHCC-CPLG as a key contributor in our cyber extortion and threat intelligence function, Vector3. You will lead threat actor communications and negotiation support for ransomware and cyber extortion engagements, helping shape case strategy through direct communication, disciplined documentation, and sound judgment. You will also leverage advanced analytical skills to understand threat actors, campaigns, tactics, techniques, and procedures, while providing intelligence support that strengthens incident response and case outcomes. You will work closely with your team and engagement leads to turn direct communications and threat activity into actionable support that helps the organization anticipate, understand, and respond to adversaries.

Key Responsibilities Relying on extensive security knowledge and advanced technical expertise, this role is accountable for the following responsibilities Relying on advanced knowledge and strong leadership skills, this role is accountable for the following responsibilities:

Threat Actor Communications and Negotiation Leadership: • Lead written communications and negotiation support for ransomware and cyber extortion engagements under the direction of counsel. • Develop communication strategy, draft response language, and maintain disciplined negotiation records that support case objectives. • Track demands, deadlines, concessions, proof-of-possession requests, and actor behavior to help the engagement team assess leverage and next steps. • Review and refine communications prepared by junior analysts to ensure they are clear, professional, accurate, and aligned with case strategy.

Threat Intelligence and Adversary Analysis: • Research, analyze, and track threat actors, extortion groups, malware families, campaigns, and emerging adversary infrastructure. • Correlate communications, indicators, and intelligence to identify patterns in actor behavior, tactics, techniques, and procedures. • Provide intelligence support to active investigations and time-sensitive events so response teams can make informed decisions. • Maintain actor profiles, negotiation notes, intelligence artifacts, and reference material in approved repositories.

Team Leadership and Process Improvement: • Mentor junior analysts and help establish consistent standards for negotiation support, documentation, and intelligence reporting. • Improve communication workflows, intelligence collection, validation, and dissemination processes for scale and repeatability. • Collaborate with DFIR, legal, insurance, and client-facing teams to ensure communications are timely, relevant, and actionable.

Competencies Planning • Contribute to the development of both short-term and long-term plans for designated area of the organization.

Technical Excellence • Experience leading threat actor communications and producing intelligence products that inform decisions during active cyber incidents. • Write, or is a major contributor to, technical reports and documentation. • Analyze complex threat data and present findings in a clear and useful manner for multiple audiences.

Cost Management • Develop innovative ways to improve financials.

Business Controls and Policies • Comply with all corporate policies and procedures.

Education Minimum 4 Year's bachelor's degree in cyber security, Computer Science, Information Technology related degree.

Certifications, Licenses, and Designations Preferred advanced degrees or certifications (CISSP, CISM, GCFE, GCFA, GREM, GBFA, GCIH, CFCE, CCE) are a plus

Experience 4+ years of professional experience in cyber incident response, threat intelligence, negotiations, investigations, or related analytical work.

Other • Experience leading threat actor communications in ransomware or cyber extortion cases.

• Strong writing and presentation skills with the ability to communicate clearly under pressure.

• Ability to manage multiple complex matters simultaneously and respond to urgent requests.

• Familiarity with threat actor behavior, TTPs, malware families, and campaign activity using open-source and commercial intelligence sources.

• Additional Job Description Pay Transparency The pay range for this position is $109,500-$164,300 which includes geographic adjustments, where applicable. The pay range is the range THMCC, in good faith, believes is the range of compensation for this role at the time of this posting. The hired applicant will b

Similar jobs

• Senior Cyber Threat Analyst — Brown Brothers Harriman (BBH) · Boston | Philadelphia
• Senior Cyber Threat Analyst — Brown Brothers Harriman (BBH) · Boston | Philadelphia | Jersey City
• Senior Cybersecurity Analyst — Caterpillar · Irving, Texas | Nashville, Tennessee | East Peoria, Illinois
• Senior Cyber Security Analyst — Coreone · Chantilly, VA
• Senior Cybersecurity Incident Analyst — General Motors · Warren, Michigan, United States
• Senior Cyber Threat Hunter — WGU · Raleigh, NC
• Senior Cybersecurity Technologist — Travelers · GA - Atlanta
• Cyber Security Analyst — Firstquality · Remote