Information Security Automation Specialist

TN United Kingdom; Horley; Hybrid; GBP 40,000 - 80,000; Full time

Job summary

An established industry player seeks an Information Security Automation Specialist to enhance its cyber defense capabilities. This role involves developing SOAR Playbooks, managing security tools, and collaborating with various stakeholders to ensure robust security measures. You'll work within a dynamic team that plays a crucial role in the organization's digital transformation, ensuring the safety of clients against cyber threats. If you're passionate about technology and security and want to make a significant impact, this is the perfect opportunity for you!

Benefits

Flexible Hours

Remote Work Options

Part-Time Options

Professional Development Programs

Qualifications

• Develop SOAR Playbooks and API integrations.
• Experience with RESTful APIs and system integration.
• Intermediate to advanced programming skills required.

Responsibilities

• Develop and maintain automation tasks and SOAR Playbooks.
• Manage GSOC tools across various environments.
• Document system designs and provide user training.

Skills

Software Development

Intermediate to Advanced Programming Skills

RESTful APIs

Communication Skills

Process Documentation

Vendor Management

Data Querying

Operational Experience

Education

Information or Cyber Security Qualification

Tools

Azure Sentinel

SOAR Tools (XSOAR, Azure Logic Apps)

Unix/Linux Servers

Job description

Job Title/Req Number: Information Security Automation Specialist 106271

Base Location: Anywhere in the UK, including London, Manchester, Birmingham or Edinburgh, plus a network of 20 offices nationally.

KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on projects that impact the whole organization. From setting standards and best practices to developing innovative tech-enabled solutions for clients, you'll be part of a global team changing the way our business operates. We look forward to welcoming you to our team.

KPMG is one of the world's largest and most respected consultancy businesses. We've supported the UK through times of war and peace, prosperity and recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses which make the UK what it is.

Why Join KPMG

The core services provided by Global Technology & Knowledge are more crucial than ever to our future, as we enable KPMG’s digital transformation, provide trusted technology services, ensure security across the network, and accelerate our Collective Strategy. Our ways of working are based on principles of customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized under five new ‘domains’: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations. This is an exciting time as we continue to drive technology excellence at the heart of Collective Strategy v3.0, with our GT&K colleagues playing a pivotal role in this success.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team, including the Global Security Operations Center (GSOC), helps defend KPMG and its clients from cyber-attacks through timely detection, investigation, and remediation of potential threats.

What will you be doing?

• Developing SOAR Playbooks, programming new API integrations, developing new automation tasks, and maintaining them.
• Managing installation, operation, and support of GSOC tools across multiple environments including physical Data Centres, Azure public cloud, and O365.
• Coordinating with vendors, KPMG teams, and business stakeholders on design and setup activities at various project stages.
• Documenting system designs, builds, and modifications.
• Providing user training and creating training materials.
• Monitoring systems, resolving issues, and preparing status reports.
• Managing support cases to ensure issues are tracked, resolved, and followed up promptly.

What will you need to do it?

• Intermediate to advanced software development/programming skills.
• An Information or Cyber Security qualification (preferred but not essential): e.g., CompTIA, CISSP, CISSM, CISMP, GIAC, CEH, or equivalent.
• Experience with RESTful APIs, including development.
• Excellent written and oral communication skills.
• Ability to document processes and procedures professionally.
• Experience working with vendors and solution providers (preferred).
• Proficiency in modern programming languages.
• Experience with system integration using RESTful APIs.
• Knowledge of automation, workflow, orchestration, and BPM.
• Ability to query large datasets.
• Experience working in operational roles with strict SLAs.

Skills we’d love to see / Amazing Extras:

• Experience in a Security Operations environment.
• Knowledge of SIEM solutions, preferably Azure Sentinel.
• Experience with SOAR tools like XSOAR or Azure Logic Apps with Azure Functions.
• Knowledge of Query Languages, preferably KQL.
• Familiarity with Microsoft Azure and O365 solutions.
• Experience managing Unix/Linux servers.

To discuss this or wider Technology roles, apply by creating a profile, uploading your CV, and making your mark with KPMG.

Our Locations:

• Glasgow
• Leeds
• London Canary Wharf
• Manchester

With 20 sites across the UK, we offer office work, remote work, flexible hours, and part-time options. Please discuss your needs with our team.

Find out more:

• Technology and Engineering at KPMG
• ITs Her Future Women in Tech programme
• KPMG Workability and Disability confidence