GSOC Security Engineering Lead

Responsibilities

• Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap
• Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond
• Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response
• Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively
• Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance
• Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications

• Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7 security operations center or managed security service
• Bachelor's degree from an accredited college or university in a related discipline such as computer science or information technology is required with minimum ten years of equivalent professional experience; certifications requirements: CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty, MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect
• Proven ownership of SIEM and SOAR platform engineering at global scale, covering log source onboarding, data pipeline design, and the end-to-end detection content lifecycle
• Experience supporting CSIRT and major incident response, providing the tooling, telemetry and technical escalation that responders rely on under time pressure
• Deep knowledge of the Microsoft security stack, including Microsoft Sentinel, Defender XDR, Microsoft Entra ID and the wider Microsoft 365 security tooling suite
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Benefits

• Comprehensive, competitive benefits package including medical and dental plans, vision coverage, disability and life insurance
• 401(k) plans
• Robust suite of personal well-being benefits to support mental health
• Personal Time Off per fiscal year (based on job classification, standard work hours, and years of service)
• Calendar of holidays observed during the year; eligible employees receive two breaks each year where Personal Time Off is not required (year‑end and around July 4th)

Pay

California Salary Range: $198,000 - $368,000