GSOC Security Engineering Lead

for each section. Inside each, use

• for list items,

  for prose. For Responsibilities: we have a list of items separated by semicolons after "Responsibilities:" line. Let's extract each bullet: - Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap - Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond - Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response - Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively - Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance - Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service - Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment We'll make each as

• . Qualifications: list after "Qualifications:" includes multiple items separated by semicolons or line breaks. Let's parse: - Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7 security operations center or managed security service - Bachelor's degree from an accredited college or university in a related discipline such as computer science or information technology is required with minimum ten years of equivalent professional experience; certifications requirements: CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect - Proven ownership of SIEM and SOAR platform engineering at global scale, covering log source onboarding, data pipeline design, and the end-to-end detection content lifecycle - Experience supporting CSIRT and major incident response, providing the tooling, telemetry and technical escalation that responders rely on under time pressure - Deep knowledge of the Microsoft security stack, including Microsoft Sentinel, Defender XDR, Microsoft Entra ID and the wider Microsoft 365 security tooling suite - Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa) We'll make each bullet as
• . Note that some bullets have internal semicolons; we keep as is. Benefits: prose: "KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday." We could split into

  for prose, and maybe a

  for list of benefits? The benefits list includes medical/dental plans, vision coverage, disability and life insurance, 401(k) plans, personal well-being benefits. Could make a
  . But we can also keep as prose. The instruction: Use
  • for any list of duties/requirements/benefits, and

    for prose. So we should convert the benefits list into a

    . Let's extract list items: - medical and dental plans - vision coverage - disability and life insurance - 401(k) plans - robust suite of personal well-being benefits to support your mental health We'll put those in
    • . The rest of the sentences about eligibility, Personal Time Off, holidays, breaks can be in

      . Pay: we have salary range: "California Salary Range: $198000 - $368000". Also mention "KPMG offers a comprehensive compensation and benefits package." Could be prose. We'll make a

      with that sentence and the range. Schedule: we have info about Personal Time Off, holidays, breaks. Already partly in benefits but we can put schedule-specific: "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday." We'll make a

      . We must not include sections with filler like "commensurate with experience". We have real content. Now produce HTML fragment. Check no extra tags like or . Just the fragment. Let's craft:

      Responsibilities

      • Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap
      • Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond
      • Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response
      • Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively
      • Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance
      • Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service
      • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

      Qualifications

      • Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7