Information Security Automation Specialist

TN United Kingdom; Birmingham; Hybrid; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking an Information Security Automation Specialist to join their dynamic team. In this role, you'll develop SOAR Playbooks, manage security operations tools, and collaborate with vendors and stakeholders to enhance cybersecurity measures. This opportunity offers a chance to work in a flexible environment across various locations in the UK, contributing to the digital transformation of a leading consultancy firm. If you're passionate about cybersecurity and automation, this role is perfect for you!

Benefits

Flexible Work Arrangements

Remote Work Options

Part-time Opportunities

Professional Development Programs

Qualifications

• Intermediate to advanced programming skills required.
• Experience with RESTful APIs and system integration preferred.

Responsibilities

• Develop and maintain SOAR Playbooks and API integrations.
• Monitor systems and resolve issues promptly.

Skills

Software Development

RESTful APIs

Communication Skills

System Integration

Documentation

Problem Solving

Data Querying

Education

Information Security Qualification

Cyber Security Qualification

Tools

Azure Sentinel

XSOAR

Azure Functions

Unix/Linux

Job description

Job Title/Req Number: Information Security Automation Specialist 106271

Base Location: Anywhere in the UK, including London, Manchester, Birmingham or Edinburgh, plus a network of 20 offices nationwide.

KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on projects that impact the entire organization. From setting standards and best practices to developing innovative tech-enabled solutions for clients, you'll be part of a global team changing the way our business operates. We look forward to welcoming you to our team.

KPMG is one of the world's largest and most respected consultancy businesses. We've supported the UK through times of war and peace, prosperity and recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses which make the UK what it is.

Why Join KPMG

The core services provided by Global Technology & Knowledge are more crucial than ever to our future, as we enable KPMG’s digital transformation, provide trusted technology services, ensure security across the network, and accelerate our Collective Strategy. Our ways of working are based on customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized under five new ‘domains’: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations. This is an exciting time for us as we continue to drive technology excellence at the heart of Collective Strategy v3.0, and our GT&K colleagues all play a pivotal role in making this a success.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team, which includes the Global Security Operations Center (GSOC), helps defend KPMG and its clients from cyber-attacks through timely detection, investigation, and remediation of potential threats.

What will you be doing?

• Developing SOAR Playbooks, programming new API integrations, developing new automation tasks, and maintaining existing ones.
• Installing, managing, maintaining, and supporting GSOC tools hosted on multiple environments including physical data centers, Azure public cloud, and O365.
• Coordinating with vendors, other KPMG teams, and business stakeholders on design and setup activities at different project stages.
• Documenting all system designs, builds, and modifications.
• Coordinating and delivering user training and training materials.
• Monitoring systems, resolving issues, and preparing status reports.
• Managing support cases to ensure issues are recorded, tracked, resolved, and followed up on in a timely manner.

What will you need to do it?

• Intermediate to advanced software development/programming skills.
• An Information or Cyber Security qualification is preferred (e.g., CompTIA, CISSP, CISSM, CISMP, GIAC, CEH), but not essential.
• Experience with RESTful APIs, including development.
• Excellent written and oral communication skills.
• Ability to document processes and procedures professionally.
• Experience working with vendors and solution providers is preferred.
• Proficiency in modern programming languages.
• Experience with system integration using RESTful APIs.
• Knowledge of automation, workflow, orchestration, and BPM.
• Ability to query large datasets.
• Experience in operational roles with strict SLAs.

Skills we’d love to see / Amazing Extras:

• Experience in a Security Operations environment.
• Knowledge of SIEM solutions, preferably Azure Sentinel.
• Experience with SOAR tools such as XSOAR or Azure Logic Apps with Azure Functions.
• Knowledge of Query Languages, preferably KQL.
• Good working knowledge of Microsoft Azure and O365 solutions.
• Experience managing Unix/Linux servers.

To discuss this or other Technology roles, apply by creating a profile, uploading your CV, and beginning your journey with KPMG.

Our Locations

We are open to talent across the UK, with core hubs in:

• Glasgow
• Leeds
• London Canary Wharf
• Manchester

With 20 sites nationwide, we offer flexible work arrangements including office, remote, part-time, and flexible hours. Please discuss your needs with our team.

Find out more

Explore our divisions and specialisms in Tech and Engineering, including:

• Technology and Engineering at KPMG
• ITs Her Future Women in Tech programme
• KPMG Workability and Disability Confidence