About KTSA We are KTSA – KPMG Technology Services Americas.
A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.
Excel by creating impact and leaving your mark on global projects.
Manage and perform day-to-day security monitoring and incident response activities for 24x7 operations, using a thorough understanding of cybersecurity. Response activities may include incident response, incident management, driving remediation or threat mitigation, threat hunting, and forensic analysis. Develop automated playbooks in XSOAR for vulnerability identification and remediation to ensure comprehensive security monitoring coverage.
Stay current on information security controls, practices, techniques, and capabilities, focusing on XSOAR advancements. Facilitate skill development for security personnel on monitoring and incident response by mentoring and conducting sessions on using XSOAR for automation and improving efficiency.
Leverage intelligence to lead and manage threat and vulnerability monitoring, respond appropriately, and develop risk mitigation strategies. Continuously incorporate learnings into preventive and detective controls. Define security configurations for monitoring tools—alerts, correlation rules, and reporting—using vendor products, services, open-source, and custom utilities.
Implement automation and orchestration to improve efficiency and effectiveness of security monitoring and response processes. Integrate processes and technologies, with the objective of a "single pane of glass" for monitoring and comprehensive security response process.
Produce operating metrics and key performance indicators.
May oversee work product(s) and lead entire small to medium size projects, managing deadlines, expectations, and often contributing to staffing decisions and supervising the work performed by more junior staff; provide coaching, mentoring and feedback to such individuals and may also serve as a formal performance manager of a team of junior employees.
Bachelor’s degree with 5-8 years of experience in Cyber security operations, and demonstratable experience with Palo Alto Cortex XSOAR or other security orchestration and automation implementation.
Both project and operational experience in security monitoring, security operations, and incident response activities; preferably within a professional services firm or similar environment.
Experience implementing processes, including playbooks and procedures, defining security monitoring rules, and providing management oversight of security tooling.
Hands on network and administration skills with Linux, Windows, cloud security, Active Directory, SIEM and security infrastructure (e.g. Microsoft Sentinel and related technology stack, such as Microsoft Purview) are relevant.
Excellent English verbal / written communication, collaboration, analytical and presentation skills to lead an environment driven by customer service and teamwork. Experience leading meetings and operating effectively in a matrixed environment.
Ability to participate in development of resource plans and project estimation.
Cybersecurity certifications include but not limited to CISSP, CCSP, CCSK, GSEC, GCIH, GCFE, GCFA, SC-200, CEH, and AZ-900.
Learning opportunities, training, and certification programs
Comprehensive medical plan, life insurance, car insurance, and funeral assistance
We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of flexible working arrangements could be of interest. KTSA - KPMG Technology Services of Americas
Consulting Manager • Mexico City, Mexico City, MX