Teams at Tokio Marine

Investigates individual claims, interprets health and excess insurance plans, audits claim documentation and benefit payments, determines liability, establishes and updates reserves, authorizes appropriate payments, and communicates coverage decisions to third-party administrators and clients. The role also refers high-dollar or trigger-diagnosis claims to specialized departments and requires medical terminology, claims analysis, policy interpretation, confidentiality, and Microsoft Office proficiency.

Support ransomware and cyber extortion engagements through threat actor communications, negotiation documentation, case tracking, stakeholder coordination, and concise reporting. Research threat actor groups, campaigns, malware, tactics, techniques, and procedures using open-source and internal intelligence. Maintain actor notes, intelligence artifacts, communication logs, templates, playbooks, and operating procedures while contributing to process improvements and engagement strategy.

Lead and execute DFIR investigations for ransomware and BEC incidents: act as incident commander, manage triage/response, mentor and build DFIR team, develop IR processes, perform forensic analysis across endpoints, networks, memory and cloud, and communicate findings to clients and stakeholders.