Overview In this role you lead the Global Security Engineering effort within KPMG's Global Digital Group, guiding engineering architecture, automation, and AI-enabled security capabilities. You drive a CI/CD and IaC-driven DevOps maturity and ensure auditable, production-ready security estates. You collaborate across the GISG and KPMG firms to test, adopt, or retire innovations. You shape standards and develop a high-performing, global engineering team to deliver secure, scalable security solutions.
Compensation / Benefits- comprehensive benefits package
- medical and dental plans
- vision coverage
- disability and life insurance
- 401(k) plans
- well-being benefits
Responsibilities- Own engineering architecture and platform strategy for GSOC tech estate, translating into a prioritized technical roadmap
- Define automation, orchestration, integration and content-as-code roadmap; advance CI/CD, IaC, automated testing and observability with measurable improvements
- Lead design, evaluation and productionization of AI and agentic capabilities across detection, triage, investigation, enrichment and response
- Manage structured innovation pipeline from horizon scanning to proof-of-value and production adoption
- Establish design, build, testing, release, secure development, AI-usage and documentation standards; ensure production readiness and audit readiness
- Lead, resource, coach and develop the global engineering team; manage objectives, career development, succession and engagement
- Oversee debt management and risk remediation to keep the estate auditable and compliant
- Uphold integrity and professional behavior within a respectful work environment
Key requirements- Minimum ten years in security operations engineering
- Bachelor's degree in Computer Science or Information Technology; CISSP and CCSP or CCSK (or equivalent)
- Other important certifications: AZ-500, Google Professional Cloud Security Engineer, AWS Certified Security - Specialty, MCSE: Cloud Platform and Infrastructure, AWS Solutions Architect
- Proven ownership of SIEM and SOAR platform engineering at global scale
- Experience supporting CSIRT and major incident response with tooling and telemetry
- Deep knowledge of Microsoft security stack (Microsoft Sentinel, Defender XDR, Entra ID, Microsoft 365 security tooling)
- Authorized to work in the U.S. without visa sponsorship
- leadership and people management
- collaboration across cross-functional teams
- integrity and professionalism
- DevOps maturity (CI/CD, IaC, automated testing, release engineering)
- automation, orchestration, and content-as-code
- AI and agentic security capabilities
