AVP, Threat Intel

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range$157,000.00 - $259,200.00

1

Bond & Specialty Insurance provides management and professional liability insurance, as well as surety bonds to businesses and non-profit organizations of all sizes. The Specialty Cyber team within BSI has developed an industry-leading suite of integrated cyber sales, underwriting, service, and support capabilities. Our platform effectively identifies vulnerabilities throughout the policy period to reduce customers' exposure to cyber events and delivers distribution efficiencies to insurance agents and brokers. The AVP, Threat Intelligence role is a senior level role reporting to the VP, Cyber Risk Officer for Specialty Cyber where you will play a pivotal role in safeguarding thousands of organizations against emerging cyber threats. You will lead the threat intelligence team to deliver innovative strategies to stay ahead of emerging threats. You will work cross-functionally across Travelers to keep the business informed of emerging risks and deliver new approaches to mitigating cyber-attacks. Your expertise will be crucial in identifying new data sources, extracting the most impactful trends, and guiding the business to take action.What Will You Do?

• Lead the Specialty Cyber Threat Intel team, managing the day-to-day team operations to ensure we achieve our business objectives and outcomes.
• Develop and drive strategy to enhance visibility into emerging threats and reduce the likelihood of successful cyber-attacks against policyholders.
• Develop metrics and operating mechanisms to monitor for new cyber threats and measure the impact and business outcomes related to the team’s work.
• Develop roadmaps for research and development projects that advance the team’s capabilities.
• Use cyber threat expertise to keep the business informed of emerging threats that could lead to cyber claims.
• Stay current on evolving risk trends and partner with Underwriting, Actuary, Data Science, Technology, Marketing, and Product to turn our threat insights into action that reduces our loss ratio.
• Build and maintain relationships with individuals across Travelers who are critical to achieving our target outcomes.
• Serve as a subject matter expert (SME), providing thought leadership internally and externally to further our teams' objectives.
• Mentor and train the team.
• Perform other duties as assigned.

What Will Our Ideal Candidate Have?

• Proven leadership skills with the ability to mentor team members.
• Hands-on adversary emulation or red teaming experience with a strong understanding of how cyber-attacks are conducted including the common tactics and tools used by threat actors.
• Knowledge of incident response processes and tools such as SentinelOne, CrowdStrike, Carbon Black.
• Experience with tools like Shodan, Censys, and Wappalyzer to identify vulnerable devices on the internet and familiarity with vulnerability management practices.
• Strong analytical and problem-solving abilities.
• Experience leading research and development teams and projects.
• Flexibility to adapt to changing threat landscapes and priorities.
• Excellent written and oral communication skills with a demonstrated ability to translate technical topics for non-technical audiences in writing and presentations..
• Demonstrated knowledge of current threat actor tools, tactics, and procedures.
• Demonstrated ability to work cross-functionally in large organizations, developed shared objectives, and deliver target business outcomes.

What is a Must Have?

• 8 years working in information security, red teaming, threat intelligence or related fields.
• 5 years leading technical teams.