As a Technical Security Analyst here at Chubb, you'll leverage your broad information security expertise to play a crucial role in our Regional Information Security Office (RISO) for North America. Reporting to the Head of Technical Security.  You'll collaborate with business, technical, and engineering stakeholders to identify and address security gaps, guide compliance corrections, and manage control exceptions throughout the development and infrastructure deployment lifecycle. You'll drive business process improvements using tools like Power Automate, contributing to strategic project deployments. You'll engage with stakeholders at all levels, playing a critical role in ensuring the security and stability of our applications and infrastructure. At Chubb, you won’t be silo’d; you’ll have broad exposure across all areas of information security, in a complex technical environment that powers Chubb’s North American business operations. 

 

To do so, you’ll leverage  your knowledge of, and gain additional exposure to,:

Application Security: Leverage your understanding of application security, including mastery of security principles, familiarity with the OWASP Top 10, and the ability to secure CI/CD pipelinesVulnerability Management: You’ll regularly interpret SAST/DAST/SCA/IAST/Infra vulnerability management tool results and provide advice to development, infrastructure, and business stakeholdersNetwork Security: Employ your knowledge of network security principles and best practices, analyze network connectivity for security, and understand the importance of DMZs and firewall technologiesIdentity and Access Management: Use your knowledge of authentication methods and Privileged Access Management to ensure adherence to authentication standardsData Security: Incorporate your knowledge of data classification and encryption to apply best practices to database technologiesReporting and Automation: Utilize tools like Power Automate to automate business processes while gathering and presenting security metrics to business and technical stakeholders through the use of BI tools such as Qlik, PowerBI, Tableau, etc.Bachelor’s Degree from an accredited college or university in Information Security, Information Technology, Computer Science, or a related technical degreeAt least 6 years’ of experience working in an information security focused role spanning Application Security, Vulnerability Management, Identity and Access Management Network Security, Data Security and/or a related disciplineProven ability to apply knowledge to proactively identify and resolve security concerns if/as they ariseExperience interpreting and applying information security standards and frameworks (e.g., ISO/IEC 27001/27002, PCI-DSS, NIST Cybersecurity Framework, etc.)Demonstrated knowledge of securing cloud platforms and applicationsProven ability to explain technical issues to mixed audience ranging from technical to business, project management to leadershipExperience managing project lifecycles, with working experience of Agile, Waterfall and CI/CD project methodologiesProven knowledge across varied technologies such as networking, servers, IOT etc.Demonstrated ability to understand and analyze complex business processes and technologies to make sound recommendations to constituents

 

The pay range for the role is $85,400 to $135,600. The specific offer will depend on an applicant’s skills and other factors. This role may also be eligible to participate in a discretionary annual incentive program.  Chubb offers a comprehensive benefits package, more details on which can be found on our careers website.  The disclosed pay range estimate may be adjusted for the applicable geographic differential for the location in which the position is filled.