KUBRA provides customer experience management solutions to some of the largest utility and government entities across North America.
Our portfolio of meter-to-cash and outage communication solutions includes billing and payment, mapping, mobile apps and proactive communications solutions for customers.
With more than one billion customer experiences annually, KUBRA services reach over 40% of U.S.
households.
KUBRA is an operating subsidiary of the Hearst Corporation.

KUBRA

security-operations

KUBRA is a leader in customer experience management solutions, offering a comprehensive range of services such as billing and payments, customer communications, and digital solutions for various industries. Their products and services include KUBRA EZ-PAY for on-demand payments, iDoxs for E-Billing, iMail for document printing and mailing services, Notifi for alerts, and comprehensive analytics platforms. KUBRA caters to industries including utilities, insurance, government, auto finance, healthcare, mortgage, telecom, and waste management. They emphasize improving customer satisfaction, reducing costs, and enhancing compliance through innovative omni-channel solutions. Their platforms integrate advanced technology, including AI and mobile applications, to streamline processes and enhance customer interactions.

KUBRA provides customer experience management solutions to some of the largest utility and government entities across North America. Our portfolio of meter-to-cash and outage communication solutions includes billing and payment, mapping, mobile apps and proactive communications solutions for customers. With more than one billion customer experiences annually, KUBRA services reach over 40% of U.S. households. KUBRA is an operating subsidiary of the Hearst Corporation.

• Security Infrastructure Management: Maintain and optimize the security infrastructure (Firewalls, IDS/IPS, AV, SIEM, FIM, servers, etc.) with a specific focus on maintaining Exabeam SIEM and CrowdStrike (managing EDR, FIM, and DLP modules).
• Cloud Security Operations: Execute AWS cloud security operations, monitoring specific services (e.g., GuardDuty, Security Hub, CloudTrail) to secure cloud workloads and respond to cloud-native threats.
• Incident Response: Monitor systems, software, and skills to stay ahead of emerging threats: Lead or participate in security investigations and Assist during Incident Response and Recovery activities.
• Data Pipeline Management: Manage and optimize security data pipelines using Cribl to ensure efficient log routing, parsing, and data reduction before ingestion.
• Infrastructure as Code (IaC): Utilize IaC principles (specifically Terraform) to deploy, maintain, and audit security configurations and infrastructure.
• Network Security: Perform firewall operational tasks as approved.
• Governance & Risk: Maintain and enforce KUBRA’s IT management control framework that defines the institution’s overall approach to IT risk and control.
• Incident Management: Participate in on-call rotation to respond, investigate and resolve Security Incidents.
• Alert Coordination: Track and action alerts to ensure proper response is taken by coordinating the work efforts of internal teams and actions required of external service providers.
• SIEM Optimization: Apply understanding of environment and operational issues to work with external or internal parties for implementation or optimization of specific Exabeam SIEM use cases to help improve detection and response.
• Threat Intelligence: Maintain the vulnerability security digest, monitor threat feeds, and provide regular threat intelligence updates.
• Access Reviews: Conduct access control reviews on a case-by-case basis to systems and work with internal and external resources to update user control lists and provide reports.
• Audit & Compliance: Assist in remediation tasks related to audits/penetration tests.
• Training & Testing: Participate in internal and external table-top exercises related to cybersecurity.
• Documentation: Assist in development of process and procedure documents for Security Operations.
• Policy Guidance: Evaluate and provide guidance to exemption requests as per corporate policy and standards, to advise of risk involved.

Security Operations Analyst

Security Operations Analyst at KUBRA ensuring data protection and responding to security incidents. Join a dynamic team focused on continuous improvement in cybersecurity.

security-engineer

• Perform security architecture design reviews and provide recommendations to improve the security posture of KUBRA’s application, database, and cloud platforms
• Perform periodic testing, code analysis, and security assessments of KUBRA owned applications
• Govern cloud security systems for change and configuration control thereby suggesting changes to further improve the overall security posture.
• Partner with DevSecOps, Application and Infrastructure teams to ensure any vulnerabilities or issues are resolved per security guidelines 
• Stay up to date with current cyber security risk and analyze trends to proactively prevent problems.
• Develop an overall organizational data strategy that is in line with business processes and contractual requirements
• Provision secure cloud infrastructure leveraging Infrastructure-as-Code
• Identify and provide guidance on appropriate controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud native threats
• Participate in SDLC process to assess security requirements and controls and ensure that security controls are implemented as planned
• Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls
• Ensure data accessibility is based on roles and security within all data platforms utilized across the firm
• Ensure logging and monitoring of all critical infrastructure is in place

Senior Security Architect

Senior Security Architect designing and implementing enterprise-grade security solutions for KUBRA in cloud and hybrid environments. Trusted advisor ensuring secure systems and applications against evolving threats.

• Management of Staff & Projects: Lead the implementation and maintenance of Cybersecurity programs and projects.
• Security Standards: Develop and implement security operations standards, procedures, and guidelines as needed.
• Strategic Planning: Create and update security plans to address evolving threats and risks.
• Team Leadership: Lead and manage the Security Operations team, providing guidance, training, and mentorship.
• Recruitment: Oversee the recruitment and development of security operations analysts.
• Goal Achievement: Lead the team in achieving established goals and departmental objectives.
• Performance Management: Accomplish staff results by communicating job expectations; planning, monitoring, and appraising job results; coaching, counseling, and disciplining employees; developing, coordinating, and enforcing systems, policies, procedures, and productivity standards.
• Culture: Foster an environment that emphasizes trust, open communication, creative thinking, and cohesive team effort.
• Develop and implement security operations standards, procedures, and guidelines as needed
• Create and update security plans to address evolving threats and risks.
• Assess the operational security risks of third-party tools and integrations within the security stack to support vendor risk management responsibilities.
• Manage the 24/7 monitoring of security alerts and incidents.
• Develop and implement incident response plans and procedures.
• Establish and maintain an incident response plan to address security breaches and emergencies.
• Coordinate and lead the response to security incidents, collaborating with relevant stakeholders.
• Conduct or oversee investigations into security incidents, violations, or breaches.
• Collaborate with law enforcement or external agencies as needed.
• Oversee digital forensics investigations to support HR, Legal, and external law enforcement requirements during serious breaches or internal policy violations.
• Design, implement, and operate a comprehensive Risk-Based Vulnerability Management Program covering Infrastructure, Applications, and CI/CD Pipelines.
• Drive the classification of vulnerabilities based on contextual risk (e.g., exploitability, asset criticality) rather than just CVSS scores, prioritizing remediation efforts effectively.
• Establish and lead a Security Champions Program to foster security culture within development and engineering teams, ensuring security advocates are embedded across the organization.
• Oversee the deployment and maintenance of security technologies within the SOC, such as SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems, and other relevant tools.
• Management of security technologies, such as firewalls, surveillance systems, access control systems, and intrusion detection systems.
• Oversee the Identity and Access Management (IAM) and Identity Governance and Administration (IGA) programs, ensuring proper lifecycle management, access reviews, and least-privilege enforcement.
• Stay current on the latest cyber threats and vulnerabilities.
• Integrate threat intelligence into SOC processes to proactively identify potential risks.
• Implement continuous monitoring of network and system activities.
• Analyze security alerts and log data to identify patterns and trends.
• Prepare and deliver regular reports on Security Operations activities, incident trends, and key performance indicators (KPIs).
• Maintain documentation of incidents, responses, and lessons learned.
• Ensure compliance with relevant regulations and industry standards such as PCI DSS, NIST, ISO and other frameworks.
• Conduct regular tabletop exercises to test and improve incident response capabilities.
• Manage the budget for the Security Operations team, ensuring cost-effective use of resources.
• Provide input for the acquisition of new tools and technologies.
• Define and track key performance metrics to measure the effectiveness of Security operations.

Manager, Security Operations

Security Manager enhancing KUBRA's security posture through strategic decision making and collaboration on security processes. Protecting data assets from threats while working closely with technology and business stakeholders.

KUBRA

About the company

Open jobs

3 jobs found

Security Operations Analyst

KUBRA

Senior Security Architect

KUBRA

Manager, Security Operations

KUBRA