Job Description

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

• Design, develop, and maintain SOAR playbooks and workflows for automated incident response
• Integrate SOAR platforms with SIEM, EDR, firewalls, ticketing systems, threat intelligence feeds, and other security tools
• Automate use cases such as phishing response, malware containment, account compromise, and alert triage
• Customize and optimize playbooks using Python, REST APIs, JSON, and scripting
• Collaborate with SOC teams to understand alert requirements and improve response time and accuracy
• Perform testing, troubleshooting, and enhancement of automated workflows
• Maintain documentation for playbooks, integrations, and automation logic
• Continuously identify opportunities for automation to improve SOC maturity
• Ensure compliance with security policies and operational best practices
• Perform end-to-end email header analysis to identify phishing, spoofing, spam, and malicious indicators.
• Analyze and investigate phishing and spam emails reported by users or detected by security tools.
• Execute blocking and whitelisting operations across security systems.

• Hands‑on experience with SOAR platforms such as:

• Palo Alto Cortex XSOAR

• Splunk SOAR

• IBM SOAR

• Swimlane or simila

• Strong experience in Python scripting and automation

• Good understanding of SOC operations and incident response lifecycle

• Experience integrating security tools (SIEM, EDR, IAM, Email security, Firewalls)

• Familiarity with REST APIs, JSON, YAML, webhooks

• Knowledge of cybersecurity frameworks (MITRE ATT&CK, NIST, ISO 27001)

• Ability to troubleshoot, debug, and optimize automation workflows

• Equal employment opportunity information

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.