Manager, Content Development, Detection Engineering & Automation

Overview In this role, you will lead the creation and refinement of security detections and automated workflows to protect enterprise clients. You’ll collaborate with Threat Intelligence, SOC, and Incident Response to align detections with MITRE ATT&CK and drive efficient security operations. You’ll design high-fidelity detection rules and automate responses to minimize false positives and MTTR. This position sits within KPMG’s Enterprise Security Services, shaping how detection and automation scale across engagements. Compensation / Benefitscomprehensive compensation and benefits packagemedical and dental plans, vision coverage401(k) planswell-being benefits for mental healthpaid time off and holiday observancesflexible work arrangements (where applicable) ResponsibilitiesDesign, develop, test, deploy, and tune detection content using CI/CD (Detection-as-Code)Collaborate with Threat Intelligence, SOC, and Incident Response to map detections to MITRE ATT&CKCreate and optimize detection rules, alerts, and threat-hunting queries (KQL) for Microsoft Sentinel/Azure Data ExplorerArchitect and maintain automated incident response playbooks and integrations in Cortex XSOAR; build scalable data pipelines with OpenTelemetryAutomate repetitive security tasks and threat intelligence enrichment to reduce MTTRDemonstrate integrity and professionalism in the work environment Key requirementsFive+ years in security monitoring, operations, and incident responseBachelor's degree preferred; high school diploma/GED requiredCertifications such as CISSP, CISM, CEH, GIAC, or XSOAR Engineer preferredHands-on experience with Azure Sentinel, XSOAR, CrowdStrike, XSOAR, ServiceNow, and SplunkStrong knowledge of SIEM/IDS/EDR/DPI/SOAR, OpenTelemetry, scripting, and API usageAbility to serve as final escalation point for complex detection issuesStrong verbal and written communication skillsAuthorized to work in the U.S. without visa sponsorship now or in the futureStrong communication (verbal and written)Integrity and professionalismCross-functional collaborationAzure SentinelXSOARCrowdStrike