Job Description

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

Responsibilities

Design, develop, and maintain SOAR playbooks and workflows for automated incident response
Integrate SOAR platforms with SIEM, EDR, firewalls, ticketing systems, threat intelligence feeds, and other security tools
Automate use cases such as phishing response, malware containment, account compromise, and alert triage
Customize and optimize playbooks using Python, REST APIs, JSON, and scripting
Collaborate with SOC teams to understand alert requirements and improve response time and accuracy
Perform testing, troubleshooting, and enhancement of automated workflows
Maintain documentation for playbooks, integrations, and automation logic
Continuously identify opportunities for automation to improve SOC maturity
Ensure compliance with security policies and operational best practices
Perform end-to-end email header analysis to identify phishing, spoofing, spam, and malicious indicators.
Analyze and investigate phishing and spam emails reported by users or detected by security tools.
Execute blocking and whitelisting operations across security systems.

Qualifications

Hands ‑ on experience with SOAR platforms such as:
Palo Alto Cortex XSOAR
Splunk SOAR
IBM SOAR
Swimlane or simila
Strong experience in Python scripting and automation
Good understanding of SOC operations and incident response lifecycle
Experience integrating security tools (SIEM, EDR, IAM, Email security, Firewalls)
Familiarity with REST APIs, JSON, YAML, webhooks
Knowledge of cybersecurity frameworks (MITRE ATT&CK, NIST, ISO 27001)
Ability to troubleshoot, debug, and optimize automation workflows

Equal employment opportunity information

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

SOAR Automation - Associate Consultant - Mumbai