Cloud Monitoring & Compliance Engineer

KPMG UK; Birmingham; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading company seeks a Cloud Monitoring & Compliance Engineer to ensure security and compliance across its cloud environments. The role involves managing security tools, automating remediation processes, and collaborating with various teams to optimize cloud security. A Bachelor's degree in Computer Science or equivalent is required, alongside significant IT experience with cloud platforms.

Benefits

Flexible working arrangements

Commitment to inclusion and diversity

Qualifications

• Solid IT experience with major cloud providers.
• Hands-on experience securing cloud environments.

Responsibilities

• Analyze MDC Product alerts related to Cloud Security.
• Implement automated remediation activities.
• Collaborate with vendors to optimize security tools.

Skills

Cloud Security Posture Management tools

API security standards

Complex queries (RQL, KQL, SQL)

Malware detection methods

Web architecture

Programming skills (Python, PowerShell)

Education

Bachelor's degree in Computer Science

Tools

Microsoft MDC

Twistlock

Redlock

Azure

AWS

GCP

Job description

Cloud Monitoring & Compliance Engineer

Location: United Kingdom (fully remote)

About KPMG International

KPMG International, with over 273,000 colleagues in 143 countries, provides Audit, Tax, and Advisory services. Joining KPMG offers global career opportunities and exposure to impactful projects.

We help set standards, develop innovative tech-enabled solutions, and drive positive change worldwide. Our team is committed to excellence and innovation in our services.

About this Global Group

Global Technology & Knowledge enables KPMG's digital transformation, provides trusted technology services, ensures security, and accelerates our strategy. We operate under five domains: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations.

About this Team

Part of the Global Information Security Group (GISG), the Information Security Services team, including the Global Security Operations Center (GSOC) and Vulnerability Attack Surface Defense (VASD), defends against cyber threats through detection, investigation, and remediation efforts.

Role Summary

The Cloud Monitoring & Compliance Engineer ensures visibility into security and compliance across KPMG's cloud environments. Responsibilities include managing GSOC tools on Windows, Azure, and O365, supporting multi-cloud environments, and ensuring adherence to security standards.

Key responsibilities include:

1. Analyzing MDC Product alerts related to CWP & CSPM for internal clients.
2. Customizing and enhancing Cloud Security Posture Management and Cloud Workflow Protection features.
3. Onboarding new tenants and cloud providers.
4. Implementing automated remediation activities.
5. Collaborating with vendors and internal teams to optimize tools and influence roadmaps.
6. Managing, troubleshooting, and maintaining security tools daily.
7. Ensuring compliance with internal controls and standards.
8. Using DevOps practices for project tracking.

Key Accountabilities

• Analyzing MDC alerts for impacted clients.
• Enhancing CSPM and CWP features to meet KPMG requirements.
• Planning and executing automated remediation.
• Engaging with vendors to maximize product value.
• Onboarding tenants and cloud providers.
• Managing and troubleshooting security tools.

Experience / Qualifications

• Solid IT experience with major cloud providers.
• Bachelor's degree in Computer Science or related field, or equivalent experience.
• Knowledge of Cloud Security Posture Management tools (Microsoft MDC, Twistlock, Redlock).
• Experience securing cloud environments, compliance, and certification standards.
• Understanding of API security standards.
• Knowledge of exploits, malware, and detection methods.
• Experience with web architecture and system administration.
• Proficiency in building complex queries (RQL, KQL, SQL).
• Hands-on experience with Azure, AWS, or GCP security features.
• Programming skills in Python or PowerShell.

Agile/Flexible Working

We support work-life balance and flexible arrangements. Contact us to learn more.

KPMG's Commitment to Inclusion & Diversity

We value diversity and inclusion, recruiting broadly, removing barriers, and fostering an inclusive environment where everyone can thrive.

Applying with a Disability

We are committed to fair treatment and encourage discussing any reasonable adjustments needed during the recruitment process.