Cloud Monitoring & Compliance Engineer
Location: United Kingdom (fully remote)
About KPMG International
KPMG International, with over 273,000 colleagues in 143 countries, provides Audit, Tax, and Advisory services. Joining KPMG offers global career opportunities and exposure to impactful projects.
We help set standards, develop innovative tech-enabled solutions, and drive positive change worldwide. Our team is committed to excellence and innovation in our services.
About this Global Group
Global Technology & Knowledge enables KPMG's digital transformation, provides trusted technology services, ensures security, and accelerates our strategy. We operate under five domains: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations.
About this Team
Part of the Global Information Security Group (GISG), the Information Security Services team, including the Global Security Operations Center (GSOC) and Vulnerability Attack Surface Defense (VASD), defends against cyber threats through detection, investigation, and remediation efforts.
Role Summary
The Cloud Monitoring & Compliance Engineer ensures visibility into security and compliance across KPMG's cloud environments. Responsibilities include managing GSOC tools on Windows, Azure, and O365, supporting multi-cloud environments, and ensuring adherence to security standards.
Key responsibilities include:
1. Analyzing MDC Product alerts related to CWP & CSPM for internal clients.
2. Customizing and enhancing Cloud Security Posture Management and Cloud Workflow Protection features.
3. Onboarding new tenants and cloud providers.
4. Implementing automated remediation activities.
5. Collaborating with vendors and internal teams to optimize tools and influence roadmaps.
6. Managing, troubleshooting, and maintaining security tools daily.
7. Ensuring compliance with internal controls and standards.
8. Using DevOps practices for project tracking.
Key Accountabilities
* Analyzing MDC alerts for impacted clients.
* Enhancing CSPM and CWP features to meet KPMG requirements.
* Planning and executing automated remediation.
* Engaging with vendors to maximize product value.
* Onboarding tenants and cloud providers.
* Managing and troubleshooting security tools.
Experience / Qualifications
* Solid IT experience with major cloud providers.
* Bachelor's degree in Computer Science or related field, or equivalent experience.
* Knowledge of Cloud Security Posture Management tools (Microsoft MDC, Twistlock, Redlock).
* Experience securing cloud environments, compliance, and certification standards.
* Understanding of API security standards.
* Knowledge of exploits, malware, and detection methods.
* Experience with web architecture and system administration.
* Proficiency in building complex queries (RQL, KQL, SQL).
* Hands-on experience with Azure, AWS, or GCP security features.
* Programming skills in Python or PowerShell.
Agile/Flexible Working
We support work-life balance and flexible arrangements. Contact us to learn more.
KPMG's Commitment to Inclusion & Diversity
We value diversity and inclusion, recruiting broadly, removing barriers, and fostering an inclusive environment where everyone can thrive.
Applying with a Disability
We are committed to fair treatment and encourage discussing any reasonable adjustments needed during the recruitment process.
#J-18808-Ljbffr