Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Cyber Operations Content Development & Engineering to join our Enterprise Security Services organization. This is a remote work opportunity.

Responsibilities:

• Apply a thorough understanding of cyber security operations and monitoring to manage and perform the day-to-day operational responsibility of security monitoring and incident response activities, associated with operations that provide up to 24x7 coverage; identify opportunities or implement efficiencies and improvements
• Execute response activities which may include incident response, incident management, driving remediation or threat mitigation, threat hunting and forensic analysis; carry out other security operations activities which may include identification of weakness (such as vulnerabilities / insecure configurations), reviewing/assessing security configuration change requests and driving the coverage of the security monitoring services
• Perform as a service owner or subject matter expert for one or more technologies and services; stay abreast of the latest information security controls, practices, techniques and capabilities in the marketplace; facilitate internal skills development activities for information security personnel on the topic of security monitoring and incident response
• Leverage intelligence, lead and manage the monitoring for threats and vulnerabilities and respond accordingly, including the development of risk mitigating approaches; incorporate learnings into additional preventive and detective controls as a continuous feedback loop; define security configuration for monitoring tools, including alerts, correlation rules, and reporting; use a combination of vendor products and services, open source and custom developed utilities
• Implement automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes; document processes and procedures in the form of playbooks and reference guides; integrate processes and technologies, with the objective of a "single pane of glass" for monitoring and comprehensive security response process; provide input into business cases and presentations to leadership of proposed security products and studies; produce operating metrics and key performance indicators
• May oversee work product(s) and lead entire small to medium size projects, managing deadlines, expectations, and often contributing to staffing decisions and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and may also serve as a formal performance manager of a team of junior employees
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum five years of recent experience in cyber security operations, such as data loss prevention, data discovery and classification, threat detection engineering, threat analysis, threat hunting, incident response, vulnerability, and configuration monitoring with the goal of attack surface reduction
• Bachelor's degree from an accredited college or university is preferred; relevant certifications include CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900
• Both project and operational experience in security monitoring, security operations, and incident response activities, preferably within a professional services firm or similar environment; experience implementing processes, including playbooks and procedures; experience with ServiceNow is a plus
• Experience defining security monitoring rules, monitoring events, assessing risk, responding to incidents and providing security oversight related to the security features of IT tools supported by the IT operations teams; practical network and administration skills with Linux, Windows, cloud security, Active Directory, SIEM and security infrastructure (including Microsoft Sentinel and related technology stack, such as Microsoft Purview) are relevant; experience with scripting or automation
• Excellent verbal/written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork; experience leading meetings and operating effectively in a matrixed environment
• Ability to participate in development of resource plans and project estimation
• US Citizenship required

KPMG LLP (the U.S. member firm of KPMG International) offers a comprehensive compensation and benefits package. KPMG is an affirmative action-equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.

KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.

KPMG does not currently require partners or employees to be fully vaccinated or test negative for COVID-19 in order to go to KPMG offices, client sites or KPMG events, except when mandated by federal, state or local law. In some circumstances, clients also may require proof of vaccination or testing (e.g., to go to the client site).