Senior Associate, Cyber Operations – Cyber Operations

Job Description

Senior Associate, Cyber Operations | KPMG

The Tone:
This is a full-time role at KPMG, located in California, USA. KPMG provides audit, tax, and advisory services, focusing on delivering real results for clients and fostering a culture of individual development and inclusion. This role is crucial for enhancing KPMG’s Enterprise Security Services, specifically by operating and improving security orchestration tools to protect organizational assets and manage incidents effectively.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: In-person, California, USA
• Pay: $90400–$168200 yearly
• Team: Enterprise Security Services
• Mission: To build, operate, and enhance extended security orchestration and automation (XSOAR) for swift incident handling and ongoing protection of organizational assets.
• Tech Stack: XSOAR, ServiceNow, scripting, automation, security tools, alerts, correlation rules, reporting mechanisms

What You’ll Actually Do
• XSOAR Management: Utilize expertise to build, operate, and enhance the extended security orchestration and automation (XSOAR) tool, ensuring swift incident handling and ongoing protection of organizational assets.
• Incident Coordination: Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats.
• Security Monitoring: Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms, and implement automation for efficiency.
• Risk Evaluation: Apply threat intelligence for threat monitoring and vulnerability detection to evaluate and respond to events, developing risk severity levels and mitigation approaches.
• Team Development: Stay updated on security practices, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups for strategic alignment.

The Must-Haves
• Background: Senior Associate level, with a minimum of a high school diploma or GED required; a Bachelor’s degree from an accredited college or university is preferred, focusing on IT security, security operations, and incident response.
• Experience: Minimum three years of recent experience in cybersecurity operations, specifically implementing processes and playbooks in cybersecurity monitoring and incident response activities using XSOAR products.
• Skills: Excellent verbal/written English communication, collaboration, analytical, and presentation skills to effectively communicate risk and technical information, and host meetings.
• Bonus: Experience with scripting or automation, and ServiceNow; relevant certifications include XSOAR Engineer, CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900.