Information Security Automation Specialist

TN United Kingdom; Reading; Hybrid; GBP 45,000 - 85,000; Full time

Job summary

An established industry player is seeking an Information Security Automation Specialist to join their dynamic team. In this role, you will develop SOAR Playbooks and manage security operations tools, ensuring robust defense against cyber threats. You will collaborate with various stakeholders to enhance system integrations and document processes effectively. This position offers a unique opportunity to work on impactful projects that drive digital transformation while fostering a culture of empowerment and innovation. If you are passionate about technology and security, this role is perfect for you.

Benefits

Flexible working hours

Remote work options

Part-time roles available

Professional development opportunities

Health and wellness programs

Qualifications

• Intermediate to advanced programming skills required.
• Experience with RESTful APIs and system integration is essential.
• Cyber Security qualifications preferred but not essential.

Responsibilities

• Developing SOAR Playbooks and managing GSOC tools.
• Coordinating with vendors and stakeholders on project activities.
• Documenting system designs and delivering user training.

Skills

Software Development

RESTful APIs

Communication Skills

System Integration

Data Querying

Cyber Security Knowledge

Automation Knowledge

Education

CompTIA

CISSP

GIAC

Tools

Azure Sentinel

XSOAR

Azure Logic Apps

Unix/Linux

Job description

Job Title/Req Number: Information Security Automation Specialist 106271

Base Location: Anywhere in the UK, including London, Manchester, Birmingham or Edinburgh, plus a network of 20 offices nationwide.

KPMG International helps set the strategy and protect the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on impactful projects. From setting standards and best practices to developing innovative tech-enabled solutions for clients, you'll be part of a global team transforming our business. We look forward to welcoming you to our team.

KPMG is one of the world's largest and most respected consultancy firms. We've supported the UK through times of war, peace, prosperity, recession, political and regulatory upheaval. We've proudly stood beside the institutions and businesses that shape the UK.

Why Join KPMG

The core services of Global Technology & Knowledge are more crucial than ever as we enable digital transformation, provide trusted technology services, ensure network security, and accelerate our Collective Strategy. Our working principles include customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized into five domains: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations. This is an exciting time as we drive technology excellence at the heart of our strategy, with GT&K colleagues playing a pivotal role.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team, including the Global Security Operations Center (GSOC), helps defend KPMG and its clients from cyber-attacks through timely detection, investigation, and remediation of threats.

What will you be doing?

• Developing SOAR Playbooks, programming new API integrations, creating and maintaining automation tasks. Responsible for installation, management, maintenance, and support of GSOC tools across multiple environments including physical Data Centers, Azure public cloud, and O365.
• Coordinating with vendors, KPMG teams, and stakeholders on design and setup activities at different project stages.
• Documenting system designs, builds, and modifications.
• Delivering user training and preparing training materials.
• Monitoring systems, resolving issues, and preparing status reports.
• Managing support cases to ensure issues are tracked, resolved, and followed up promptly.

What will you need to do it?

• Intermediate to advanced software development/programming skills.
• An Information or Cyber Security qualification (e.g., CompTIA, CISSP, CISSM, CISMP, GIAC, CEH) is preferred but not essential.
• Experience with RESTful APIs, including development.
• Excellent written and oral communication skills.
• Ability to document processes and procedures professionally.
• Experience working with vendors and solution providers is preferred.
• Proficiency in modern programming languages.
• Experience with system integration using RESTful APIs.
• Knowledge of Automation, Workflow, Orchestration, BPM.
• Ability to query large datasets.
• Experience in operational roles with strict SLAs.

Skills we’d love to see / Amazing Extras:

• Experience in a Security Operations environment.
• Familiarity with SIEM solutions, preferably Azure Sentinel.
• Experience developing and configuring SOAR tools like XSOAR or Azure Logic Apps with Azure Functions.
• Knowledge of Query Languages, preferably KQL.
• Good working knowledge of Microsoft Azure and O365 solutions.
• Experience managing Unix/Linux servers.

To discuss this or other Technology roles, apply, create a profile, upload your CV, and start making your mark with KPMG.

Our Locations:

We are open to talent across the UK, with core hubs in:

• Glasgow
• Leeds
• London Canary Wharf
• Manchester

With 20 sites nationwide, we offer office work, remote options, flexible hours, and part-time roles. Discuss your needs with our team.

Find out more:

Explore our divisions and specialisms in Tech and Engineering:

• Technology and Engineering at KPMG
• ITs Her Future Women in Tech
• KPMG Workability and Disability Confidence