Position Title: Security Operations Engineer (Dublin)
Entity: Kroll Bond Rating Agency Europe Limited
Employment Type: Full-time
Location: Dublin, Ireland
Summary/Overview:
KBRA is seeking a Security Operations Engineer to join our growing Information Security team. This role will be based in our Dublin office and will work closely with global security team members across the United States and Europe to monitor security events, investigate threats, and strengthen the organization’s overall security posture.
This is a hands-on operational security role focused on security monitoring, incident response, vulnerability management, and security tooling across KBRA’s cloud and enterprise environments.
About the Team:
KBRA integrates security into all areas of the business and technology which has created a strong security culture. The Security Operations team works closely with engineering, infrastructure, and business teams to identify and respond to security threats while continuously improving the organization’s security posture.
This role will collaborate with security team members across multiple regions and contribute to maintaining monitoring coverage and incident response capability across KBRA’s global environment.
About the Role:
As a Security Operations Engineer, you will play a key role in building and improving KBRA’s security detection and response capabilities across cloud and enterprise environments. This role focuses on engineering effective monitoring, developing detection logic, and streamlining investigation workflows to improve security visibility, reduce operational noise and support business operations.
You will design and enhance security monitoring across systems, applications, and cloud platforms, ensuring meaningful alerts are generated and security risks are quickly identified and addressed. Working closely with infrastructure and engineering teams, you will help strengthen KBRA’s security posture by improving controls, automating operational processes, and supporting incident response activities when security events occur. You will also partner with internal teams to resolve the impact of security controls (e.g., blocked access, email, or endpoint restrictions), ensuring security measures support, rather than disrupt, business operations.
About the Job:
- Design, implement, and improve security monitoring and detection capabilities across KBRA’s cloud and enterprise environments, with a focus on AWS and Azure control-plane activity and identity-based threats.
- Engineer automation and scripting solutions to streamline investigations, alert enrichment, and operational workflows within the security operations environment.
- Leverage automation and AI-assisted tools to improve research, threat analysis, and operational efficiency within the security program.
- Support internal users by resolving security control impacts, including investigating and remediating blocked activity (e.g., web proxy, email, endpoint controls) to restore business operations.
- Investigate security incidents and suspicious activity across cloud, endpoint, and network environments, partnering with infrastructure and engineering teams to determine root cause and implement durable fixes.
- Collaborate with infrastructure and cloud engineering teams to identify and remediate vulnerabilities, security misconfigurations, and architectural weaknesses.
- Enhance visibility across AWS and Azure environments, including monitoring identity activity, API usage, and cloud security posture signals.
- Support and improve vulnerability management processes, helping prioritize risk, validate exposures, and coordinate remediation with system owners.
- Integrate and optimize security technologies including SIEM, EDR, proxy, DLP, vulnerability management, and cloud-native monitoring platforms.
- Participate in incident response activities, helping coordinate investigations and response efforts across infrastructure, engineering, and security teams.
- Develop operational playbooks, detection documentation, and investigation procedures to improve repeatability and response speed.
- Contribute to security awareness initiatives, including phishing simulations and internal security education.
- Assist in developing and maintaining security standards, policies, and operational procedures.
- Participate in a shared on-call rotation supporting security monitoring and incident response.
You will be successful in this role if you have:
- Bachelor’s degree in a related field or equivalent practical experience
- 5+ years of experience in systems administration, network administration, security engineering, or security operations
- Hands-on experience with security technologies such as vulnerability management platforms, endpoint detection and response (EDR), SIEM platforms, or intrusion detection systems
- Understanding of system, network, and cloud security principles
- Familiarity with security frameworks such as MITRE ATT&CK, CIS Critical Security Controls, and the NIST Cybersecurity Framework
- Experience investigating and responding to security alerts and incidents in enterprise or cloud environments
- Strong communication and collaboration skills with the ability to work effectively with infrastructure and engineering teamsOur Tech Stack
- Familiarity with Generative AI tools such as ChatGPT for research, data insights, and general productivity is a plus
Our Tech Stack:
Our team works with many different technologies, and we understand that no one will have experience with all of them. Here is an incomplete list:
- Cloud Platforms: AWS, Azure
- Operating Systems: Windows, Linux, macOS
- Microsoft: Office 365, Active Directory
- Network Security: Intrusion Detection Systems, firewalls, proxies
- Endpoint Security: Antivirus, EDR, Data Loss Prevention
- Vulnerability Management: Tenable, Rapid7, Qualys
- SIEM Technologies: Azure Sentinel, Splunk, Elastic
- Security Operations: threat hunting, log analysis, detection engineering
- Infrastructure/Configuration as Code: Terraform, Ansible
- Programming languages: .Net, NodeJS, PHP, Python
- AI & Developer Productivity Tools: ChatGPT, GitHub Copilot, and AI-assisted tooling
Benefits
- Flexible hybrid work schedule – Tuesdays, Wednesdays, Thursdays in the office
- Competitive benefits and paid time off
- Pension plan
- Educational and professional development financial assistance
- Employee referral bonus program
About Us
KBRA (Kroll Bond Rating Agency, LLC) is a full-service credit rating agency registered with the U.S. Securities and Exchange Commission as an NRSRO. Kroll Bond Rating Agency Europe Limited is registered as a CRA with the European Securities and Markets Authority. Kroll Bond Rating Agency UK Limited is registered as a CRA with the UK Financial Conduct Authority pursuant to the Temporary Registration Regime. In addition, KBRA is designated as a designated rating organization by the Ontario Securities Commission for issuers of asset-backed securities to file a short form prospectus or shelf prospectus. KBRA is also recognized by the National Association of Insurance Commissioners as a Credit Rating Provider. Kroll Bond Rating Agency Europe is located at 2nd Floor, One George's Quay Plaza, George's Quay, Dublin 2 D02 E440.
#LI-KS1
#HYBRID
