Senior Associate, Cyber Operations

Job Description

Senior Associate, Cyber Operations | KPMG

The Tone:
This is a full-time role at KPMG, a leading provider of audit, tax, and advisory services, consistently recognized as a great place to work and build a career. KPMG helps organizations in today’s key industries achieve real results, supported by a culture that encourages individual development, embraces an inclusive environment, and rewards innovative excellence. This role is crucial within the Enterprise Security Services organization, focusing on protecting organizational assets by building, operating, and enhancing security orchestration and automation tools, ensuring effective incident handling and continuous security posture.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: US-based
• Pay: $90400–$168200 yearly
• Team: Enterprise Security Services organization
• Mission: This person will build, operate, and enhance security tools to effectively manage cyber incidents and protect organizational assets.
• Tech Stack: XSOAR, ServiceNow

What You’ll Actually Do
• Security Operations: Build, operate, and enhance our extended security orchestration and automation (XSOAR) tool, leveraging expertise in IT security, security operations, and incident response, to ensure swift and effective incident handling and ongoing protection of organizational assets.
• Incident Management: Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats, while also conducting regular assessments to identify vulnerabilities and reviewing security change requests.
• Tool Configuration: Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms, and implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified “single pane of glass” solution.
• Threat Intelligence: Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity levels and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls.
• Professional Development: Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration.

The Must-Haves
• Background: Senior career level, possessing a minimum of a high school diploma or GED. Candidates should demonstrate expertise in IT security, security operations, and incident response.
• Experience: A minimum of three years of recent experience in cybersecurity operations is required. This experience must include implementing processes and playbooks in cybersecurity monitoring and incident response activities, specifically utilizing XSOAR products.
• Skills: Requires excellent verbal and written English communication, collaboration, analytical, and presentation skills to effectively communicate risk and technical information in a matrixed environment. Scripting or automation capabilities are also important for this role, alongside the ability to participate in resource planning and project estimation.
• Bonus: A Bachelor’s degree from an accredited college or university is preferred. Relevant certifications such as XSOAR Engineer, CISSP, GSEC, GCIH, or CEH are a significant plus. Experience with ServiceNow is also considered beneficial.