Incident Response Analyst

at  Chubb

Chubb Global Information Security is looking for security professionals to detect and respond to cyber threats. As an Incident Response Engineer, you will be hands-on with technology as you prevent, detect, and respond to cyber threats on systems and services (on prem and cloud) digital assets. The ideal candidate will have experience with Incident Response and proactively securing environments from threats. This role will also collaborate with other teams across Chubb to build, implement and operate security best practices in all areas, including Azure. This role requires practical experience securing and responding to incidents in large, global, regulated enterprise environments.

REQUIRED QUALIFICATIONS:

• Degree in Computer Engineering, Computer Science, Information Systems, or any equivalent qualification or experience
• Hands on experience in security event analysis & triage
• Proficient with security tools, such as SIEM, EDR and IPS/IDS (e.g. MS Defender/Sentinel/QRadar/Exabeam)
• Ability to work with a sense of urgency while remaining calm under pressure
• Excellent communication skills, both verbal and written
• Solid problem solving and decision-making skills
• Strong sense of collaboration, teamwork, and good interpersonal skills
• Ability to be on-call or available after hours for emergencies

PREFERRED QUALIFICATIONS:

• Security Certifications such as GCIH, CCSP, CISSP, OSCP
• Experience with Azure security, including MS Defender products, KQL
• Programming knowledge such as Python, PowerShell, scripting will be a plus

• Detect, response and remediate security incidents from various log sources, third party escalation and user reported incidents promptly and accurately
• Perform security monitoring and incident response activities across Chubb networks, leveraging a variety of tools and techniques
• Develop incident response playbooks, perform proactive threat hunts based on threat intelligence
• Collaborate with engineering teams to design and deploy security solutions for both existing and new security infrastructure/ application components
• Leverage engineering skills to contribute to the design and implementation of security improvements across the infrastructure
• Participate in Incident Response Team on-call rotation
• Create workflows via processes and/or automations to solve security challenges
• Prepare operational reporting and after-action reports