Lead SIEM Engineer

Business Title

Lead SIEM Engineer Requisition Number : 117451 - 1 Function : Business Support Services

Area of Interest

State : AK

City

Anchorage

Description

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Cyber Operations Content Development & Engineering to join our Enterprise Security Services organization. This is a remote work opportunity.

Responsibilities

• Apply a thorough understanding of cyber security operations and monitoring to manage and perform the day-to-day operational responsibility of security monitoring and incident response activities, associated with operations that provide up to 24x7 coverage; identify opportunities or implement efficiencies and improvements
• Execute response activities which may include incident response, incident management, driving remediation or threat mitigation, threat hunting and forensic analysis;carry out other security operations activities which may include identification of weakness (such as vulnerabilities / insecure configurations), reviewing / assessing security configuration change requests and driving the coverage of the security monitoring services
• Perform as a service owner or subject matter expert for one or more technologies and services;stay abreast of the latest information security controls, practices, techniques and capabilities in the marketplace; facilitate internal skills development activities for information security personnel on the topic of security monitoring and incident response
• Leverage intelligence, lead and manage the monitoring for threats and vulnerabilities and respond accordingly, including the development of risk mitigating approaches; incorporate learnings into additional preventive and detective controls as a continuous feedback loop; define security configuration for monitoring tools, including alerts, correlation rules, and reporting; use a combination of vendor products and services, open source and custom developed utilities
• Implement automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes; document processes and procedures in the form of playbooks and reference guides; integrate processes and technologies, with the objective of a single pane of glass for monitoring and comprehensive security response process; provide input into business cases and presentations to leadership of proposed security products and studies; produce operating metrics and key performance indicators
• May oversee work product(s) and lead entire small to medium size projects, managing deadlines, expectations, and often contributing to staffing decisions and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and may also serve as a formal performance manager of a team of junior employees
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications

EEO statement

KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.

J-18808-Ljbffr