Senior Cloud Security Engineer: Multi-Cloud Detection

Chubb; Philadelphia (Philadelphia County); On-site; USD 140,000 - 190,000; Full time

Job summary

Chubb Global Information Security is seeking a hands-on Senior Cloud Security Engineer to detect, respond to, and harden against cyber threats across our multi-cloud environment (Azure primary, AWS, GCP, and Microsoft 365). The role emphasizes practical incident response and automation, rather than design of access models.

The ideal candidate will build detection content, lead end-to-end incident response engagements, and partner with IAM, infrastructure, and application teams to reduce risk

Responsibilities

• Detect, respond to, and remediate cyber threats across Azure, AWS, GCP, and Microsoft 365
• Build and tune detection content (KQL analytics rules, Sigma rules, Sentinel workbooks) to close coverage gaps as new threats and cloud services emerge
• Lead and support incident response engagements end-to-end - triage, containment, eradication, and after-action reporting
• Harden cloud and SaaS environments against known attack techniques (identity abuse, misconfiguration, lateral movement, persistence) in partnership with infrastructure, IAM, and application teams
• Create workflows and automations (logic apps, scripts, or AI-assisted tooling) to solve recurring security challenges and speed up triage/response
• Investigate anomalous activity using SIEM, EDR, and native cloud logging; drive tuning to reduce false positives without losing coverage
• Prepare operational reporting and after-action reports for business and IT Security management
• Stay current on emerging cloud attack techniques and translate them into new detections or hardening controls before they're needed

Job description

Chubb Global Information Security is seeking a hands-on Senior Cloud Security Engineer to detect, respond to, and harden against cyber threats across our multi-cloud environment (Azure primary, AWS, GCP, and Microsoft 365). The role emphasizes practical incident response and automation, rather than design of access models.

The ideal candidate will build detection content, lead end-to-end incident response engagements, and partner with IAM, infrastructure, and application teams to reduce risk