GSOC Security Engineering Lead

KPMG International Cooperative; Cardiff; On-site; GBP 110,000 - 140,000; Full time

Job summary

KPMG International Cooperative is seeking a Global Security Operations Centre Engineering Lead to own the architecture, reliability and cost efficiency of the security operations tech estate. You will lead engineering across SIEM, security orchestration, telemetry, data pipelines and AI-enabled detection platforms.

You will drive DevOps maturity, CI/CD, infrastructure as code, automated testing and release discipline, while shaping a predictable, scalable and secure technology roadmap for the

Responsibilities

• Own the architecture, reliability, performance, resilience, scalability and cost efficiency of the security operations technology estate, translating platform strategy into a prioritised engineering roadmap.
• Lead engineering across security information and event management, security orchestration and automated response, telemetry, data pipelines and detection content platforms.
• Advance DevOps maturity through CI/CD, infrastructure as code, automated testing, observability and disciplined release engineering.
• Design, evaluate and introduce AI-assisted and agentic capabilities for detection, triage, enrichment, investigation and response with guardrails and human oversight.
• Run a structured innovation pipeline from horizon scanning to controlled production use, proving benefits and halting non-delivering initiatives.
• Set and enforce engineering, secure development, testing, release, AI use and documentation standards; manage technical debt and risk remediation.
• Lead, resource, coach and develop the global engineering team, strengthening DevOps, cloud, data and AI capability.

Job description

KPMG International helps set strategy, protect the reputation of the global organisation and support independent member firms that provide Audit, Tax and Advisory services. Its global teams set standards, develop best practices and deliver technology-enabled solutions that support the wider network. The Global Security Operations Centre Engineering Lead sits within Information Security Services, part of the Global Information Security Group in Global Digital. The team protects KPMG and its clients from cyber threats through continuous monitoring, detection, investigation and response, working closely with security, technology and business teams across the global organisation. You will be accountable for the engineering platforms, integrations, automation and AI-enabled capabilities behind this service. Within the strategic direction set by leadership, you will translate priorities into a practical roadmap, develop business cases and investment recommendations, and deliver secure, scalable and cost-effective services. You will also lead a globally distributed team, manage the engineering budget and supplier performance, and promote a DevOps-first approach in which content and infrastructure are version-controlled, reviewed, tested and deployed consistently. Roles and responsibilities

• Own the architecture, reliability, performance, resilience, scalability and cost efficiency of the security operations technology estate, translating platform strategy into a prioritised engineering roadmap.
• Lead engineering across security information and event management, security orchestration and automated response, telemetry, data pipelines and detection content platforms.
• Advance DevOps maturity through continuous integration and delivery, infrastructure as code, automated testing, observability and disciplined release engineering, reducing manual effort and improving detection and response times.
• Design, evaluate and introduce AI-assisted and agentic capabilities for detection, triage, enrichment, investigation and response, with clear guardrails, monitoring, auditability and human oversight.
• Run a structured innovation pipeline from horizon scanning and proof of value through controlled production use, demonstrating benefits and stopping initiatives that do not deliver.
• Set and enforce engineering, secure development, testing, release, AI use and documentation standards; approve production readiness and manage technical debt and risk remediation.
• Lead, resource, coach and develop the global engineering team, strengthening capability in DevOps, cloud, data and AI while supporting objectives, career development, succession and engagement.