Senior Associate, Cyber Operations

KPMG LLP; Chicago (IL); On-site; USD 90,000 - 120,000; Full time

Job summary

KPMG LLP in the United States seeks a Senior Associate, Cyber Operations to join its Enterprise Security Services organization. This role focuses on maintaining 24x7 security operations, incident response, and threat prevention to protect client assets.

Responsibilities include coordinating incident management, threat hunting, forensics, and remediation; configuring security tools; leveraging threat intelligence; mentoring teammates; and contributing to small projects and staffing decisions

Qualifications

• 3+ years in cybersecurity operations with incident response experience.
• Bachelor's degree preferred; or 5+ years of relevant experience with certifications.
• Experience with scripting/automation; ServiceNow is a plus.
• Authorized to work in the U.S. without visa sponsorship now or in the future.

Responsibilities

• Maintain 24x7 cybersecurity operations and incident handling.
• Coordinate incident management, threat hunting, forensics, and remediation.
• Configure and monitor security tools; implement automation/orchestration.
• Leverage threat intelligence to monitor and respond to events; assess risk.
• Mentor team members and collaborate with internal tech groups.
• Develop work products and support small projects, threat assessments, and investigations; manage deadlines and staffing decisions.
• Uphold integrity, professionalism, and our respectful work environment.

Skills

Cybersecurity operations

Incident response

Automation scripting

Azure / Cloud

Education

Bachelor's degree preferred

Tools

ServiceNow

Job description

KPMG is currently seeking a Senior Associate, Cyber Operations to join our Enterprise Security Services organization.

Responsibilities:

• Utilize your expertise in IT security, security operations, and incident response to enhance and maintain robust 24x7 cybersecurity operations, ensuring swift and effective handling of incidents and ongoing protection of organizational assets
• Handle and coordinate tasks such as incident management, threat hunting, forensic analysis, and remediation efforts to mitigate threats; conduct regular assessments to identify vulnerabilities and insecure configurations and review security change requests to ensure robust protective measures
• Configure and monitor security tools, including alerts, correlation rules, and reporting mechanisms; implement automation and orchestration to improve the efficiency and effectiveness of security monitoring and response processes, aiming for a unified "single pane of glass" solution
• Leverage intelligence to apply threat monitoring and vulnerability detection to evaluate and respond effectively to events and developing risk severity level and mitigation approaches, incorporating feedback and lessons learned into enhanced preventive and detective controls
• Stay updated on the latest security practices and technologies, mentor the team through knowledge-sharing sessions, and build strong relationships with internal tech groups to ensure strategic alignment and foster collaboration
• Develop work product(s) and support small projects, threat assessments, and incident investigations while managing deadlines, expectations, and contributing to staffing decisions
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment

Qualifications:

• Minimum three years of recent experience in cybersecurity operations with experience implementing processes and playbooks in cybersecurity monitoring and incident response activities
• Bachelor's degree from an accredited college or university is preferred; or a minimum of a high school diploma or GED is required with at least five years of equivalent professional experience; relevant certifications such as: CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900 are preferred
• Experience with scripting or automation, and ServiceNow is a plus
• Work Schedule: 10-hour shifts, Sunday-Wednesday or Wednesday-Saturday; flexibility is required to adapt to business needs
• Excellent verbal/written English communication, collaboration, analytical and presentation skills; effectively communicate risk, technical information, and host meetings effectively in a matrixed environment
• Experience with On-Prem and Azure Google Cloud environments
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)