Senior at KPMG India

Bangalore, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

11 Oct, 26

Salary

0.0

Posted On

13 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability Management, Security Monitoring, Qualys, ServiceNow, Qlikview, Linux Administration, Windows Administration, Active Directory, KQL, Splunk, Cloud Computing, SIEM, Sentinel, Network Security, Endpoint Protection Platforms, Communication Skills

Industry

Business Consulting and Services

Description

Job Code 4347 Job Title Senior Associate, Vulnerability Management Job Subtitle Job Family Systems Operations [https://firmwideapps.us.kpmg.com/sites/ktechcareers/_layouts/15/listform.aspx?PageType=4&ListId=c71dfce7-fc38-44aa-8bbe-577c0a6a0d14&ID=6&RootFolder=*] Job Subfamily Vulnerability Management Level Senior Associate Job Summary The Vulnerability Senior Associate is responsible for the execution and continuous reduction of vulnerabilities identified by the Digital Security Group and for working with the appropriate teams to develop and monitor projects related to protecting the firm. The individual will be responsible for ensuring proper escalation, and communication processes are followed. Principal Responsibilities * Review reports on vulnerability issues and determine owners and remediation * Execute processes for coordinating and tracking remediation activities * Suggest and implement processes to improve outcomes as operations mature * Assist in documenting services and processes to be performed by VR team as well as remediation plan owners and cross functional remediation champions * Research and collaborate with cross functional teams in the development of risk mitigating approaches in order to drive timely responses and improve operations * Stay abreast of current cyber security and technology news and trends. Skills -------------------------------------------------------------------------------- * Experience working with cross functional teams, operations, and projects preferably within a professional services firm or similar environment * Experience in security monitoring, security operations, and/or vulnerability remediation activities * Knowledge of security monitoring tools, such as Qualys, reporting and workflow tools, such as ServiceNow and Qlikview * Hands on network and systems administration skills with Linux and Windows, Active Directory competence, networking, storage and programming knowledge * KQL/Splunk and Cloud experience preferred * Understanding of network and system intrusion and detection methods. Examples of related technologies include Splunk, Sentinel, Next Generation Endpoint Protection Platforms (EPP), Security information and event management (SIEM) * Strong verbal/written communication, with ability to effectively interact with individuals at all levels of responsibility and authority Education Education Bachelor's Degree/Master's Degree Preferred / Relevant industry experience Years of Experience 3 – 10 years Type of Experience Experience in IT operations, in a large-scale organization Qualifications Experience - 8+ years’ experience supporting a combination of the following: converged infrastructure stacks, including application, hypervisor, compute, storage and networking supporting diverse portfolios, multiple business applications and IT services. Demonstrated experience with Service and Event Management tools. Proven ability to be detail, deadline, and results oriented. Strong leadership skills with the ability to motivate and encourage others. Ability to manage competing priorities and workflow. Solid interpersonal skills for written, oral, and face to face communications. Strong customer service orientation, seeking opportunities to serve clients.

Responsibilities

The role focuses on executing and reducing vulnerabilities identified by the Digital Security Group through coordination and tracking of remediation activities. It involves collaborating with cross-functional teams to develop risk-mitigating approaches and documenting security processes.