The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology.    

The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability

As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve.

You’ll be enabling KDN accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. 

And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

Our KDN Bulgaria Cloud unit is focused on designing, building, securing and managing cloud native and hybrid platforms for the KPMG group of member firms, as well as providing cloud advisory and engineering services to external clients.

The DevOps Security Engineer is responsible for designing, engineering, automating and operationalising cloud security capabilities across enterprise cloud environments. The engineer will embed security into cloud platforms, CI/CD pipelines, containers, Kubernetes environments and Infrastructure as Code deployments. The role covers identity, infrastructure, applications, workloads, data and network security across multi-cloud environments.

Using cloud-native security services, CSPM, CWP, CNAPP, SIEM, XDR, automation and AI-assisted technologies, the engineer will develop scalable security capabilities that improve visibility, strengthen preventive controls, accelerate detection and response and reduce manual effort.

• Design, deploy and support security controls, landing zones, security baselines and guardrails across multi-cloud environments.
• Engineer and secure cloud workloads, including virtual machines, containers, Kubernetes platforms, serverless services and cloud-native applications.
• Deploy and operate Cloud Workload Protection capabilities to strengthen workload visibility, protection and resilience.
• Embed security controls into CI/CD pipelines, Infrastructure as Code and cloud engineering processes.
• Develop policy-as-code, automated compliance validation and security orchestration capabilities.
• Automate cloud security monitoring, remediation, reporting and configuration management.
• Integrate cloud telemetry, workload events, audit logs and posture findings into security operations platforms.
• Deploy, manage and optimise Cloud Security Posture Management, Cloud Workload Protection and Cloud-Native Application Protection Platforms.
• Identify and support the remediation of cloud misconfigurations, workload vulnerabilities, excessive permissions and other security weaknesses.
• Integrate cloud security telemetry with SIEM, SOAR and security operations platforms, including Microsoft Sentinel and Google Security Operations.
• Develop integrations, APIs, playbooks, workflows and automated remediation solutions.

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
• 5+ years of hands-on cybersecurity experience across security engineering, cloud security, security operations or security architecture.
• 3+ years of hands-on cloud security engineering experience in enterprise-scale cloud environments.
• Strong understanding of cloud security architecture, networking, identity and access management, workload security and the shared-responsibility model.
• Experience designing, deploying and operating security controls across Google Cloud, Microsoft Azure and/or AWS, with strong expertise in at least one cloud platform.
• Experience implementing and supporting security technologies such as Microsoft Sentinel, Defender XDR, Defender for Cloud, Microsoft Entra ID, Wiz or equivalent platforms.
• Proven experience delivering security automation and orchestration using Infrastructure as Code and cloud-native services.
• Hands-on experience securing containers, Kubernetes platforms, serverless services and cloud-native applications.
• Experience deploying or supporting CSPM, CNAPP, CWP, vulnerability management and cloud security posture platforms.
• Strong proficiency in Terraform.
• Experience with PowerShell, Python, cloud CLIs, KQL, detection engineering and security automation technologies.
• Experience integrating cloud security telemetry into SIEM, SOAR and security operations platforms.
• Experience developing APIs, system integrations, workflows, playbooks and automated remediation solutions.
• Strong understanding of cloud, workload, container, Kubernetes, network, identity and endpoint security controls.
• Strong knowledge of threat detection, incident response, vulnerability management, attack-surface reduction and cloud security monitoring.
• Strong analytical, troubleshooting and communication skills in English.

• The chance to work in a top talent team
• Attractive remuneration
• Build knowledge in cutting-edge technologies
• Opportunity for continuous training, learning and certification
• Experience in an international and multicultural organization
• Work on challenging projects with clients in various industries around the globe
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.