Lead SIEM Engineer

KPMG-UnitedStates • Winston Salem, NC, US

job_description.job_card.variable_days_ago

serp_jobs.job_preview.job_type

serp_jobs.job_card.full_time

job_description.job_card.job_description

Business Title

Lead SIEM Engineer Requisition Number : 117451 - 1 Function : Business Support Services

Area of Interest

State : AK

City

Anchorage

Description

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Cyber Operations Content Development & Engineering to join our Enterprise Security Services organization. This is a remote work opportunity.

Responsibilities

Apply a thorough understanding of cyber security operations and monitoring to manage and perform the day-to-day operational responsibility of security monitoring and incident response activities, associated with operations that provide up to 24x7 coverage; identify opportunities or implement efficiencies and improvements
Execute response activities which may include incident response, incident management, driving remediation or threat mitigation, threat hunting and forensic analysis;carry out other security operations activities which may include identification of weakness (such as vulnerabilities / insecure configurations), reviewing / assessing security configuration change requests and driving the coverage of the security monitoring services
Perform as a service owner or subject matter expert for one or more technologies and services;stay abreast of the latest information security controls, practices, techniques and capabilities in the marketplace; facilitate internal skills development activities for information security personnel on the topic of security monitoring and incident response
Leverage intelligence, lead and manage the monitoring for threats and vulnerabilities and respond accordingly, including the development of risk mitigating approaches; incorporate learnings into additional preventive and detective controls as a continuous feedback loop; define security configuration for monitoring tools, including alerts, correlation rules, and reporting; use a combination of vendor products and services, open source and custom developed utilities
Implement automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes; document processes and procedures in the form of playbooks and reference guides; integrate processes and technologies, with the objective of a single pane of glass for monitoring and comprehensive security response process; provide input into business cases and presentations to leadership of proposed security products and studies; produce operating metrics and key performance indicators
May oversee work product(s) and lead entire small to medium size projects, managing deadlines, expectations, and often contributing to staffing decisions and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and may also serve as a formal performance manager of a team of junior employees
Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications

Minimum five years of recent experience in cyber security operations, such as data loss prevention, data discovery and classification, threat detection engineering, threat analysis, threat hunting, incident response, vulnerability, and configuration monitoring with the goal of attack surface reduction

Bachelor's degree from an accredited college or university is preferred;relevant certifications include CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900

Both project and operational experience in security monitoring, security operations, and incident response activities, preferably within a professional services firm or similar environment; experience implementing processes, including playbooks and procedures; experience with ServiceNow is a plus

Experience defining security monitoring rules, monitoring events, assessing risk, responding to incidents and providing security oversight related to the security features of IT tools supported by the IT operations teams; practical network and administration skills with Linux, Windows, cloud security, Active Directory, SIEM and security infrastructure (including Microsoft Sentinel and related technology stack, such as Microsoft Purview) are relevant; experience with scripting or automation

Excellent verbal / written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork; experience leading meetings and operating effectively in a matrixed environment

Ability to participate in development of resource plans and project estimation

US Citizenship required

EEO statement

KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.

J-18808-Ljbffr

serp_jobs.job_alerts.create_a_job

Lead Engineer • Winston Salem, NC, US

Job_description.internal_linking.related_jobs