KPMG—Cloud Operations - Consultant

Job description

Description: This role is for you if you have the below Educational qualifications •Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field. •Master’s degree in Cybersecurity, Cloud Computing, or Information Systems is preferred. •Equivalent practical experience may be considered for exceptional candidates. • Work experience •5–7 years in cloud security operations with hands-on experience in cloud security monitoring, CSPM, and SaaS security tools. •Perform day-to-day cloud security monitoring activities including CSPM finding reviews, cloud workload threat monitoring, SaaS security event monitoring, and Shadow IT detection using Microsoft Defender for Cloud and Defender for Cloud Apps/CASB. •Support onboarding activities for cloud security monitoring: assist in confirming cloud scope, validating tool availability, and assessing deployment maturity across cloud subscriptions, IaaS, PaaS, and SaaS tenants. •Support configuration, refinement, and validation of Microsoft Defender for Cloud CSPM policies, posture baselines, severity mapping, alert thresholds, and remediation tracking workflows. •Support enablement, configuration, and validation of Microsoft Defender for Cloud workload protection for in-scope cloud workloads including virtual machines, databases, and related cloud services. •Assist in Microsoft Defender for Cloud Apps/CASB configuration for SaaS security monitoring, Shadow IT detection, and data exfiltration monitoring. •Support SaaS application onboarding activities including connector/API configuration, access coordination, and monitoring validation. •Perform alert triage, initial investigation, and escalation of cloud security findings in line with defined playbooks, SLAs, and escalation procedures. •Conduct recurring CSPM monitoring for posture findings, misconfigurations, policy violations, and remediation status tracking. •Tune alert thresholds, severity mapping, and monitoring policies to reduce noise and improve alert quality over time. •Log, track, and update security incidents and service requests in ITSM tools such as ServiceNow, ensuring timely closure within defined SLAs. •Contribute to monthly Cloud Security Monitoring and SaaS/Shadow IT reporting inputs. •Maintain and update SOPs, runbooks, and technical documentation aligned to defined standards.