Information Security Automation Specialist

TN United Kingdom; Cardiff; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

Join a forward-thinking company as an Information Security Automation Specialist, where you will play a vital role in defending against cyber threats. This exciting position involves developing automation solutions, coordinating with various teams, and ensuring the security of systems across multiple platforms. You'll work in a dynamic environment that values innovation and collaboration, contributing to a global strategy that impacts clients and communities alike. With flexible working arrangements and a strong focus on professional development, this is a fantastic opportunity to advance your career in a respected consultancy firm.

Benefits

Flexible working arrangements

Remote work options

Part-time options

Career development programs

Employee wellness initiatives

Qualifications

• Intermediate to advanced programming skills are essential.
• Experience with RESTful APIs and systems integration is preferred.
• An Information or Cyber Security qualification is a plus.

Responsibilities

• Developing SOAR Playbooks and programming new API integrations.
• Coordinating with vendors and documenting system designs.
• Monitoring systems and managing support cases.

Skills

Software Development

Cyber Security

RESTful APIs

Communication Skills

Documentation

Vendor Management

Data Querying

Operational Roles

Education

CompTIA

CISSP

CISSM

CISMP

GIAC

CEH

Tools

Azure Sentinel

XSOAR

Azure Logic Apps

Microsoft Azure

O365

Unix/Linux Servers

Job description

Job Title/Req Number: Information Security Automation Specialist 106271

Base Location: Anywhere in the UK, including London, Manchester, Birmingham, or Edinburgh, plus a network of 20 offices nationally.

KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on projects that impact the entire organization. From setting standards and best practices to developing innovative tech-enabled solutions for clients, you'll be part of a global team changing the way our business operates. We look forward to welcoming you to our team.

KPMG is one of the world's largest and most respected consultancy businesses, supporting the UK through times of war and peace, prosperity and recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses which make the UK what it is.

Why Join KPMG

The core services provided by Global Technology & Knowledge are more crucial than ever to our future, as we enable KPMG’s digital transformation, provide trusted technology services, ensure security across the network, and accelerate our Collective Strategy. Our ways of working are based on customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized under five new ‘domains’: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations. This is an exciting time for us as we continue to drive technology excellence at the heart of Collective Strategy v3.0, and our GT&K colleagues all play a pivotal role in making this a success.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team, including the Global Security Operations Center (GSOC), helps defend KPMG and its clients from cyber-attacks through timely detection, investigation, and remediation of potential threats.

What will you be doing?

1. Developing SOAR Playbooks, programming new API integrations, developing new automation tasks, and maintaining existing ones. Responsible for installation, management, maintenance, and support of GSOC tools hosted in physical Data Centers, Azure public cloud, and O365.
2. Coordinating with vendors, other KPMG teams, and business stakeholders on design and setup activities at various stages of technical projects.
3. Documenting all system designs, builds, and modifications.
4. Coordinating and delivering user training and creating training materials.
5. Monitoring systems, identifying/resolving issues, and preparing status reports.
6. Managing support cases to ensure issues are recorded, tracked, and resolved promptly.

What will you need to do it?

• Intermediate to advanced software development/programming skills.
• An Information or Cyber Security qualification is preferred but not essential: e.g., CompTIA, CISSP, CISSM, CISMP, GIAC, CEH, or equivalent.
• Experience with RESTful APIs, including development.
• Excellent written and oral communication skills.
• Ability to document processes and procedures professionally.
• Experience working with vendors and solution providers is preferred.
• Proficiency in modern programming languages.
• Experience with systems integration using RESTful APIs.
• Knowledge of Automation, Workflow, Orchestration, BPM.
• Ability to query large datasets.
• Experience in operational roles with strict SLAs.

Skills we’d love to see / Amazing Extras:

• Experience in a Security Operations environment.
• Experience with SIEM solutions, preferably Azure Sentinel.
• Experience developing and configuring SOAR tools like XSOAR or Azure Logic Apps with Azure Functions.
• Knowledge of Query Languages, preferably KQL.
• Good working knowledge of Microsoft Azure and O365 solutions.
• Experience managing Unix/Linux servers.

To discuss this or other Technology roles, apply, create a profile, upload your CV, and start your journey with KPMG.

Our Locations: We are open to talent across the UK. Core hubs include Glasgow, Leeds, London Canary Wharf, and Manchester. We offer flexible working arrangements, including office work, remote work, flexible hours, and part-time options. Discuss your needs with our team.

Find out more: Explore our divisions and specialisms in Technology and Engineering, Women in Tech programs, and our Disability confidence initiatives. For additional support, click the links to learn more.