Information Security Automation Specialist

TN United Kingdom; Watford; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

Join a forward-thinking consultancy firm as an Information Security Automation Specialist, where you'll play a crucial role in defending against cyber threats. This position offers the opportunity to develop SOAR Playbooks, manage automation tasks, and work with cutting-edge technologies across various environments, including cloud solutions. You'll collaborate with a global team, ensuring security and driving digital transformation. With flexible work arrangements and a focus on empowerment, this role is perfect for those looking to make a significant impact in the field of information security. Embrace the chance to grow and thrive in a dynamic environment.

Benefits

Flexible Work Hours

Remote Work Options

Office Work Options

Part-Time Arrangements

Qualifications

• Intermediate to advanced software development skills required.
• Information or Cyber Security qualification preferred.
• Experience with RESTful APIs and system integration.

Responsibilities

• Develop SOAR Playbooks and maintain GSOC tools.
• Coordinate with vendors and document system designs.
• Monitor systems and manage support cases.

Skills

Software Development

RESTful APIs

Communication Skills

Documentation

System Integration

Data Querying

Automation

Education

CompTIA

CISSP

CEH

Tools

Azure Sentinel

XSOAR

Azure

Office 365

Unix/Linux

Job description

Job Title/Req Number: Information Security Automation Specialist 106271

Location: Anywhere in the UK, including London, Manchester, Birmingham, or Edinburgh, plus a network of 20 offices nationwide.

KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax, and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on impactful projects. From setting standards and best practices to developing innovative tech-enabled solutions, you'll be part of a global team transforming our business. We look forward to welcoming you.

KPMG is one of the world's largest and most respected consultancy firms, supporting the UK through various times of change and challenge, standing alongside key institutions and businesses.

Why Join KPMG

Our Global Technology & Knowledge services are crucial to our future, enabling digital transformation, providing trusted technology services, ensuring security, and accelerating our strategic initiatives. We operate under principles of customer-centricity, expertise communities, flexible delivery, empowerment, and fulfilling careers. Our organization is structured into five domains: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations. We are driving technology excellence at the core of our strategy, and our colleagues play a pivotal role in our success.

About this Team

As part of the Global Information Security Group (GISG), the Information Security Services (ISS) team, including the Global Security Operations Center (GSOC), helps defend KPMG and its clients from cyber threats through detection, investigation, and remediation.

What will you be doing?

• Developing SOAR Playbooks, programming new API integrations, creating automation tasks, and maintaining systems. Responsible for installation, management, and support of GSOC tools across various environments including physical data centers, Azure cloud, and Office 365.
• Coordinating with vendors, internal teams, and stakeholders on design and setup activities during project phases.
• Documenting system designs, builds, and modifications.
• Providing user training and developing training materials.
• Monitoring systems, resolving issues, and preparing reports.
• Managing support cases to ensure timely resolution and follow-up.

What will you need to do it?

• Intermediate to advanced software development/programming skills.
• An Information or Cyber Security qualification (e.g., CompTIA, CISSP, CEH) is preferred but not essential.
• Experience with RESTful APIs, including development.
• Excellent written and oral communication skills.
• Ability to document processes professionally.
• Experience working with vendors and solution providers.
• Proficiency in modern programming languages.
• Experience with system integration using APIs.
• Knowledge of automation, workflows, orchestration, and BPM.
• Ability to query large datasets.
• Experience working in operational environments with strict SLAs.

Preferred Skills and Extras:

• Experience in Security Operations environments.
• Knowledge of SIEM solutions, especially Azure Sentinel.
• Experience with SOAR tools like XSOAR or Azure Logic Apps.
• Knowledge of query languages like KQL.
• Familiarity with Microsoft Azure and Office 365 solutions.
• Experience managing Unix/Linux servers.

To discuss this or other Technology roles, apply by creating a profile, uploading your CV, and making your mark with KPMG.

Locations:

We are open to talent across the UK, with core hubs in Glasgow, Leeds, London Canary Wharf, and Manchester. We offer options for office work, remote work, flexible hours, and part-time arrangements. Please discuss your needs with our team.

Find out more:

Explore our divisions and specialisms in Technology and Engineering, Women in Tech programs, and Disability Confidence initiatives. For additional support, click the links provided.