Senior Cloud Security Engineer

Chubb Insurance Hong Kong; Philadelphia (Philadelphia County); On-site; USD 130,000 - 165,000; Full time

Job summary

Chubb Global Information Security is seeking a hands-on Senior Cloud Security Engineer to detect, respond to, and harden multi-cloud environments (Azure, AWS, GCP) and Microsoft 365. You will build detections, respond to incidents, and reduce attack surface across a global enterprise.

You should have strong incident response fundamentals applied to cloud and SaaS, and be comfortable using AI tooling as part of daily engineering work.

Qualifications

• Experience securing multi-cloud environments (Azure, AWS, GCP) and SaaS platforms.
• Strong incident response fundamentals with cloud/applications security focus.
• Ability to build and tune detections and automation to reduce risk.

Responsibilities

• Detect, respond to, and remediate cyber threats across Azure, AWS, GCP, and Microsoft 365.
• Build and tune detection content (KQL analytics rules, Sigma rules, Sentinel workbooks).
• Lead and support incident response engagements end-to-end.

Skills

Cloud security

Incident response

Threat detection

Automation

KQL

Sigma rules

Microsoft 365 security

Azure

AWS

GCP

Tools

KQL

Sigma

Sentinel

Logic Apps

Scripts

AI tooling

Job description

Chubb Global Information Security is looking for a hands-on security engineer to detect, respond to, and harden against cyber threats across our multi-cloud environment (Azure primary, AWS and GCP, and Microsoft 365). As a Senior Cloud Security Engineer, you will build and tune detections, respond to incidents, andclose downattack paths before they're exploited. The ideal candidate has strong traditional incident response fundamentals, applies them to cloud and SaaS environments, and can build detection content and automation rather than just consume it. IAM architecture and posture program ownership sit with a dedicated team - this role is about detecting, responding, and hardening, not designing access models. This role requires practical experience securing and responding to incidents in large, global, regulated enterprise environments, and comfort using modern AI tooling (Claude/Claude Code or similar) as part of daily engineering work.

Responsibilities:

• Detect, respond to, and remediate cyber threats across Azure, AWS, GCP, and Microsoft 365
• Build and tune detection content (KQL analytics rules, Sigma rules, Sentinel workbooks) to close coverage gaps as new threats and cloud servicesemerge
• Lead and support incident response engagements end-to-end - triage, containment, eradication, and after-action reporting
• Harden cloud and SaaS environments against known attack techniques (identity abuse, misconfiguration, lateral movement, persistence) in partnership with infrastructure, IAM, and application teams
• Create workflows and automations (logic apps, scripts, or AI-assisted tooling) to solve recurring security challenges and speed up triage/response
• Investigate anomalous activity using SIEM, EDR, and native cloud logging; drive tuning to reduce false positives without losing coverage
• Prepare operational reporting and after-action reports for business and IT Security management
• Stay current on emerging cloud attack techniques and translate them into new detections or hardening controls beforethey'reneeded