Senior Cloud Threat Detection Engineer

The Hartford; Columbus (OH); Hybrid; USD 128,000 - 193,000; Full time

Job summary

The Hartford is hiring a Sr. Security Engineer to design and evolve cloud threat detection across AWS and Google Cloud.

You will develop high‑fidelity detections, integrate telemetry into the enterprise SIEM, and partner with Cloud Operations, Incident Response, and SOC to strengthen cloud security monitoring and response. The role requires hands‑on security operations across AWS and GCP, strong MITRE ATT&CK knowledge, and experience tuning SIEM detections.

Qualifications

• 5+ years of cybersecurity experience with operations, incident response, threat detection, or detection engineering.
• Hands-on experience securing AWS and GCP environments.
• Strong knowledge of AWS and GCP security services.
• Experience tuning enterprise SIEM detections using cloud telemetry.
• Experience integrating cloud-native tools and log sources into enterprise monitoring (Splunk ES, Sentinel, QRadar, Cortex XSIAM).
• Understanding of cloud attack methodologies and data exfiltration techniques.
• Experience investigating alerts using CloudTrail and GCP Audit Logs.
• Ability to create SOPs, runbooks, and analyst playbooks.
• Experience training SOC analysts on cloud threat investigation and triage.

Responsibilities

• Design, develop, test, and deploy detections for AWS and GCP threats.
• Integrate cloud telemetry from AWS/GCP into the enterprise SIEM.
• Develop detections using sources like GuardDuty, CloudTrail, SCC, and IAM telemetry.
• Create dashboards, analytics, risk-based detections, and alerting content.
• Tune detection logic to reduce false positives while improving coverage.
• Map detections to MITRE ATT&CK and cloud-specific techniques.
• Participate in adversary emulation, purple team exercises, and simulations.
• Develop enrichment strategies for AI/SOAR and incident response workflows.
• Create SOPs/runbooks/investigation guides for cloud detections and alerts.
• Train L1/L2 SOC analysts on cloud threat investigation and triage.
• Provide advanced escalation support to SOC and IR teams.
• Participate in on-call rotations (approx. 5 weeks annually).

Skills

Cloud threat detection

Incident response

SOC mentoring

Communication skills

Threat hunting

Cloud security monitoring

MITRE ATT&CK mapping

SOPs and playbooks

Adversary emulation

On-call support

Education

Bachelor's degree or equivalent

Tools

Splunk Enterprise Security

AWS GuardDuty

AWS CloudTrail

Google Cloud SCC

GCP Cloud Logging

Microsoft Sentinel

QRadar

Cortex XSIAM

Job description

The Hartford is hiring a Sr. Security Engineer to design and evolve cloud threat detection across AWS and Google Cloud.

You will develop high‑fidelity detections, integrate telemetry into the enterprise SIEM, and partner with Cloud Operations, Incident Response, and SOC to strengthen cloud security monitoring and response. The role requires hands‑on security operations across AWS and GCP, strong MITRE ATT&CK knowledge, and experience tuning SIEM detections.