GSOC Security Engineering Lead

KPMG LLP; Montvale (NJ); On-site; USD 180,000 - 280,000; Full time

Job summary

KPMG LLP seeks a Director, Global Security Engineering Lead to join the Global Digital Group. You will own the GSOC tech estate architecture, drive DevOps maturity, automation, and AI-enabled capabilities across detection, triage, and response.

Responsibilities include setting standards, managing a global engineering team, and partnering with vendors to test, adopt or retire new capabilities. The ideal candidate has 10+ years in security operations engineering, CISSP and CCSP/CCSK, and

Qualifications

• Ten years of security operations engineering experience and leadership in a 24x7 SOC/MSP.
• Bachelor's degree in CS/IT; CISSP and CCSP/CCSK or equivalent certifications.
• Experience owning SIEM and SOAR at global scale and data pipelines.
• Knowledge ofMicrosoft security stack: Sentinel, Defender XDR, Entra ID, M365 security.
• Authorized to work in the U.S. without visa sponsorship now or in the future.

Responsibilities

• Own GSOC technology estate architecture, availability, performance, resilience and cost optimization.
• Lead automation, orchestration, CI/CD and infrastructure-as-code roadmap; advance DevOps maturity.
• Lead design, evaluation and productionization of AI capabilities across detection, triage, investigation, enrichment and response.
• Run a structured innovation pipeline from horizon scanning to adoption; test and transition proven solutions.
• Establish and enforce design, build, testing, release, secure development, AI usage and documentation standards.
• Lead, resource, coach and develop the global engineering team; manage objectives and career development.
• Uphold integrity and a respectful, professional work environment.

Skills

Security engineering

Engineering leadership

DevOps & CI/CD

SIEM/SOAR

CSIRT

Cloud security

Detection content lifecycle

Education

Bachelor's degree in CS/IT

Tools

Microsoft Sentinel

Defender XDR

Entra ID

Microsoft 365 Security

Job description

KPMG is currently seeking a Director, Global Security Engineering Lead to join our Global Digital Group which is part of KPMG International.

Responsibilities:

• Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap
• Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond
• Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response
• Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively
• Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance
• Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7 security operations center or managed security service
• Bachelor's degree from an accredited college or university in a related discipline such as computer science or information technology is required with minimum ten years of equivalent professional experience; certifications requirements: CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect
• Proven ownership of SIEM and SOAR platform engineering at global scale, covering log source onboarding, data pipeline design, and the end-to-end detection content lifecycle
• Experience supporting CSIRT and major incident response, providing the tooling, telemetry and technical escalation that responders rely on under time pressure
• Deep knowledge of the Microsoft security stack, including Microsoft Sentinel, Defender XDR, Microsoft Entra ID and the wider Microsoft 365 security tooling suite
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)