Job description
About KPMG International
Together with more than 273,000 colleagues in 143 countries throughout our member firms, people at KPMG imagine big ideas and bring solutions to life for clients both big and small. A role with KPMG International will open a world of opportunity in your career.
KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us you will gain a unique understanding of how a global organization operates and work on projects that impact the whole organization. From setting standards and best practices to developing innovative tech- enabled solutions for clients, you'll be part of a global team changing the way our business operates. We look forward to welcoming you to our team.
Global Technology & Knowledge
The core services provided by Global Technology & Knowledge are more crucial than ever to our future, as we enable KPMG’s digital transformation, provide trusted technology services, ensure security across the network and accelerate our Collective Strategy. Our ways of working are based on the principles of customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized under five new ‘domains’: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group and Business Operations.
This is an exciting time for us as we continue to drive technology excellence at the heart of Collective Strategy v3.0, and our GT&K colleagues all play a pivotal role in making this a success
About this Team
As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team which includes the Global Security Operations Center (GSOC) helps defend KPMG and its clients from cyber attacks, through timely detection, investigation and remediation of potential threats
Role summary
We are seeking a talented and innovative Security Engineer to join our Global Security Operations Center (GSOC) team.
This role focuses on Innovation, ensuring that automation supports and is part of any operationalization activities while leveraging DevOps principles to enhance security operations. The ideal candidate will possess expertise in Palo Alto Cortex, Azure technologies including Logic Apps and Microsoft Sentinel, and ServiceNow, and be responsible for building, improving, and maintaining automated workflows to streamline security monitoring and incident response.
You will also work with the Innovation Lead to introduce new technologies and processes, and to participate in the delivery of technical projects, systems and services for the GSOC. You will be working in a fast-paced environment driving performance, reliability and supporting the GSOC tools and infrastructure hosted on Physical and Cloud platforms delivering SOC services.
The successful candidate for this role will have strong analytical and troubleshooting skills, experience in integrating multiple technologies, solid communication skills and a desire to tackle the complex problems of scale which are unique.
1. Design, implement, and maintain security automation solutions to improve operational efficiency and reduce manual intervention in security processes.
2. Use Palo Alto Cortex, Azure, and other security tools to automate threat detection, incident response, and workflow management within the SOC.
3. Collaborate with GSOC teams to integrate security automation solutions into the CI/CD pipeline, ensuring security is embedded throughout the DevOps process.
4. Work with cross-functional teams to identify opportunities for improvement and develop new capabilities for better detection, prevention, and response to security threats.
5. Collaborate with the SOC analysts, security engineers, and other IT teams to enhance security visibility and reduce response time to potential threats.
Key Accountabilities
6. Ensure continuous improvement to GSOC processes and technology through automation.
7. Support the Innovation Lead and liaise with KPMG teams, business stakeholders, and vendors to design and setup activities at different stages of a technical project.
8. Installation, management, maintenance and support of GSOC technologies hosted on multiple environments including physical Data Centers, Azure public cloud and O365.
9. Monitor systems, identify/resolve issues, prepare status reviews and reports.
10. Compile and maintain the necessary documentation of all system designs, builds and modifications.
11. Responsible for coordination and delivery of user training and training material.
12. Manage support cases to ensure issues are recorded, tracked, resolved, and follow-ups are done in a timely manner.
Experience / Qualifications
13. Bachelor’s degree, Master’s, or PhD in Computing, Information Security, or related field (or equivalent work experience)
14. Certifications such as CISSP, CISM, AWS Certified Security – Specialty, Azure Security Engineer are a plus
15. Familiarity with threat intelligence platforms and SIEM tools
16. Deep understanding of security technologies, principles, and best practices related to incident response and threat detection
17. Expert in scripting or development languages e.g. Python, and a query language e.g. KQL
18. Experience automating security workflows using scripting languages such as Python, PowerShell, or Bash
19. Experience with Query Languages preferably KQL
20. Experience working as a Security Engineer or in a Security Operations Center (SOC) environment
21. Strong hands-on experience with automation and Azure Security technologies (including Azure Sentinel, Logic Apps, etc.)
22. Proven expertise in DevOps tools and practices (e.g., Git, Jenkins, Terraform, Docker, Kubernetes)
23. Strong troubleshooting and problem-solving skills with an ability to work under pressure in a dynamic environment
Agile/Flexible Working
At KPMG International, we are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss individual requirements and our range of flexible working arrangements could be of interest. Please ask to find out more.
KPMG International's commitment to inclusion & diversity
At KPMG International, we recognise that we need inclusion and diversity to be successful. We want to attract, retain and develop diverse talent at all levels. This means recruiting from the widest pool of talent across our network and beyond, removing barriers that can prevent our people from reaching their full potential, and fostering a fully inclusive environment which empowers everyone to bring their whole selves to work.