GSOC Security Engineering Lead

We need to output HTML fragment with sections: About the role? The posting includes intro paragraph about KPMG, then "Responsibilities:" list, "Qualifications:" list, then some other info: visa sponsorship, salary range, benefits, etc. We need to include sections only when there is real specific content. Must not repeat job title as heading. Use

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide which sections to include. We have content: Intro paragraph about KPMG and the role: could be "About the role". That seems appropriate. Responsibilities: we have a list of responsibilities (multiple bullet-like sentences). Should be

• . Qualifications: we have a list of qualifications (experience, degree, certifications, etc). Should be
  • . Skills: maybe we could extract skills from qualifications? But we have no separate skills section; we could combine qualifications and skills? The instruction: prefer a few substantive sections over many thin ones. We could have About the role, Responsibilities, Qualifications, Benefits, Pay. Benefits: we have description of benefits package. Pay: we have salary range for California and link to pay transparency. So we can include Pay and Benefits sections. Schedule: not mentioned, so omit. Requirements: maybe we could treat qualifications as requirements; but we already have Qualifications. Could omit Requirements. Thus sections: About the role, Responsibilities, Qualifications, Benefits, Pay. We need to preserve all substantive information, not invent or summarize away detail. Must not include boilerplate like EEO, visa sponsorship? Actually visa sponsorship is substantive: "Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)". That's a requirement; could be placed in Qualifications or maybe a separate section like Requirements. Since we have Qualifications, we could include that as a bullet under Qualifications. Similarly, the benefits description is substantive. We must not include duplicated lines, cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The posting includes EEO statement at end; we must remove that. Also remove "No phone calls or agencies please." etc. Also remove "KPMG recruits on a rolling basis." etc. Also remove "Los Angeles County applicants: Material job duties for this position are listed above." etc. Also remove the Fair Chance Act text? That is legal boilerplate; we should remove. Also remove "KPMG LLP and its subsidiaries (“KPMG”) complies with all local/state regulations regarding displaying salary ranges." That's somewhat boilerplate but also mentions salary ranges; but we already have salary range. Might keep the sentence about salary ranges? It's somewhat generic; but it's part of pay transparency. Might be considered boilerplate; but we already have salary range and link. The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. That sentence is legal/compliance about displaying salary ranges; could be considered boilerplate. Safer to remove it. Keep only the specific salary range and link. Also remove "KPMG offers a comprehensive compensation and benefits package." That's somewhat generic but we have benefits details; maybe keep as part of benefits intro. We need to preserve all substantive information: responsibilities list, qualifications list, benefits details, pay range, link. Let's extract responsibilities bullet points: - Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap - Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond - Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response - Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively - Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance - Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service - Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment Qualifications bullet points: - Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7 security operations center or managed security service - Bachelor's degree from an accredited college or university in a related discipline such as computer science or information technology is required with minimum ten years of equivalent professional experience; certifications requirements: CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect - Proven ownership of SIEM and SOAR platform engineering at global scale, covering log source onboarding, data pipeline design, and the end-to-end detection content lifecycle - Experience supporting CSIRT and major incident response, providing the tooling, telemetry and technical escalation that responders rely on under time pressure - Deep knowledge of the Microsoft security stack, including Microsoft Sentinel, Defender XDR, Microsoft Entra ID and the wider Microsoft 365 security tooling suite - Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa) Benefits: - KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work. Pay: - California Salary Range: $198000 - $368000 - Link: https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=6774_9_26 (for salary ranges by city outside of CA) Also note: "KPMG offers a comprehensive compensation and benefits package." Could be included in benefits intro. We must not include duplicated lines. Ensure we don't repeat the same info. Now construct HTML:

    About the role

    Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Director, Global Security Engineering Lead to join our Global Digital Group which is part of KPMG International.

    Then responsibilities:

    Responsibilities

    • Own the engineering architecture, availability, performance, resilience, scalability and cost efficiency of the GSOC (Global Security Operations Center) technology estate; contribute to the platform strategy and translate it into a deliverable, prioritized technical roadmap
    • Set and deliver the automation, orchestration, integration and content-as-code roadmap; drive DevOps maturity through CI/CD, infrastructure-as-code, automated testing, observability and release engineering, with measurable reduction in manual analyst effort and mean time to detect and respond
    • Lead the design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response
    • Run a structured innovation pipeline from horizon scanning through proof-of-value to controlled adoption; partner with vendors, the wider GISG innovation community and KPMG member firms to test emerging capability, evidence benefit, and transition proven solutions into production or retire them decisively
    • Establish and enforce design, build, testing, release, secure development, AI-usage and documentation standards; approve production readiness, own technical debt and risk remediation, and ensure the estate is auditable and evidence-ready for internal audit, regulatory and client assurance
    • Lead, resource, coach and develop the global engineering team; own objectives, performance, career development, succession pipeline and engagement, and build the DevOps, cloud, data and AI engineering skills required for the future service
    • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
    Qualifications:

    Qualifications

    • Minimum ten years of recent experience in security operations engineering, with proven success leading an engineering team in a 24x7 security operations center or managed security service
    • Bachelor's degree from an accredited college or university in a related discipline such as computer science or information technology is required with minimum ten years of equivalent professional experience; certifications requirements: CISSP and either CCSP or CCSK, or equivalent industry experience; other certifications of importance: AZ-500 – Microsoft Azure Security Technologies, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty MCSE: Cloud Platform and Infrastructure, AWS Certified Solutions Architect
    • Proven ownership of SIEM and SOAR platform engineering at global scale, covering log source onboarding, data pipeline design, and the end-to-end detection content lifecycle
    • Experience supporting CSIRT and major incident response, providing the tooling, telemetry and technical escalation that responders rely on under time pressure
    • Deep knowledge of the Microsoft security stack, including Microsoft Sentinel, Defender XDR, Microsoft Entra ID and the wider Microsoft 365 security tooling suite
    • Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B