Executive – Splunk & SOC Threat Intelligence

About the role

KPMG is seeking an Executive to lead Splunk and Security Operations Center (SOC) threat intelligence activities. The role involves producing actionable intelligence, supporting incident response, and advising stakeholders on emerging cyber threats.

Key responsibilities

• Use intelligence collection and reporting tools to create customized threat intelligence reports.
• Publish, present, and explain findings to relevant stakeholders.
• Collect, process, catalog, and document cyber‑security information using an all‑source approach.
• Develop tactical and strategic intelligence products, including advisories and threat landscape reports.
• Maintain deep knowledge of threat actor groups, campaigns, tactics, techniques, and procedures.
• Act as an escalation point for CTI analysis and investigation‑related events.
• Collaborate with incident response and security monitoring teams for joint investigations.
• Identify gaps in intelligence and work with leadership to address them.
• Participate in regular production reporting for clients, partners, and internal teams.

Required profile

• Hands‑on experience with various OSINT tools.
• Ability to conduct dark‑web and deep‑web scans.
• Experience deploying and managing threat‑intelligence platforms such as MISP and Recorded Future.
• Basic understanding of vulnerability‑scanning solutions.
• Intermediate knowledge of cyber‑security threats and attack vectors.

Required skills

• OSINT tools
• Dark‑web scanning
• MISP
• Recorded Future
• Vulnerability scanning solutions
• Cyber‑threat analysis