Senior Cloud Security Engineer: Threat Detection & Response

Chubb Life Fund; Philadelphia (Philadelphia County); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Chubb Global Information Security in the United States seeks a hands-on Senior Cloud Security Engineer to detect, respond to, and harden multi-cloud environments (Azure, AWS, GCP, Microsoft 365).

You will build detections, lead incident response, and automate containment and remediation with SIEM/EDR tooling; collaborate with IAM, infrastructure, and apps teams to reduce risk and drive security improvements.

Responsibilities

• Detect, respond to, and remediate cyber threats across Azure, AWS, GCP, and Microsoft 365
• Build and tune detection content (KQL analytics rules, Sigma rules, Sentinel workbooks) to close coverage gaps as new threats and cloud services emerge
• Lead and support incident response engagements end-to-end - triage, containment, eradication, and after-action reporting
• Harden cloud and SaaS environments against known attack techniques (identity abuse, misconfiguration, lateral movement, persistence) in partnership with infrastructure, IAM, and application teams
• Create workflows and automations (logic apps, scripts, or AI-assisted tooling) to solve recurring security challenges and speed up triage/response
• Investigate anomalous activity using SIEM, EDR, and native cloud logging; drive tuning to reduce false positives without losing coverage
• Prepare operational reporting and after-action reports for business and IT Security management
• Stay current on emerging cloud attack techniques and translate them into new detections or hardening controls before they're needed

Job description

Chubb Global Information Security in the United States seeks a hands-on Senior Cloud Security Engineer to detect, respond to, and harden multi-cloud environments (Azure, AWS, GCP, Microsoft 365).

You will build detections, lead incident response, and automate containment and remediation with SIEM/EDR tooling; collaborate with IAM, infrastructure, and apps teams to reduce risk and drive security improvements.