Associate, Cyber Operations – AI Security Operations

Job Description

Associate, Cyber Operations (AI-DLP) | KPMG

The Tone:
This is a full-time role at KPMG, located in the USA, within the Enterprise Security Services organization. KPMG is known for providing audit, tax, and advisory services to organizations across vital industries, driven by a culture that encourages individual development and innovation. This role is crucial for safeguarding sensitive firm and client data by implementing AI security guardrails and actively responding to emerging AI-driven threats across various platforms. The position contributes directly to maintaining KPMG’s robust security posture and client trust.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: USA
• Pay: $72200–$122800 yearly
• Team: Enterprise Security Services organization
• Mission: Safeguard sensitive firm and client data by monitoring DLP technologies, incorporating AI security guardrails, and responding to AI-related security incidents.
• Tech Stack: DLP technologies, AI security guardrails, user behavior analytics, GenAI, LLMs, AI coding assistants, copilots, agentic workflows

What You’ll Actually Do
• Security Monitoring: Monitor DLP technologies and incorporate AI security guardrails across endpoints, cloud platforms, and collaboration tools.
• Incident Response: Drive end-to-end DLP incident response, including triage, containment, root cause analysis, and remediation for incidents involving AI-related tools.
• Threat Detection: Detect and analyze emerging AI-driven threats by correlating DLP alerts, user behavior analytics, and data movement patterns.
• Risk Assessment: Perform threat hunting, incident mitigation, and assessments to identify system weaknesses, vulnerabilities, and policy non-compliance.
• Process Optimization: Document operational processes in playbooks and reference guides, while designing automated agentic workflows to streamline security operations.

The Must-Haves
• Background: Entry-Level. Minimum of a high school diploma or GED is required; a Bachelor’s degree from an accredited college or university is preferred. Foundational knowledge in security monitoring, operations, or incident response.
• Experience: Minimum one year of recent experience with security monitoring, operations, or incident response within a professional services environment.
• Skills: Ability to quickly learn security products, tools, and processes; communicate technical findings clearly to diverse stakeholders; create documentation such as incident reports and playbooks; familiarity with AI technologies like GenAI, LLMs, and agentic workflows.
• Bonus: Interest in pursuing professional certifications or vendor-specific products, developing agentic workflows, and understanding associated security and data protection risks related to AI technologies.