The world of global advisory, audit and tax compliance services for large multi-nationals is rapidly changing and heavily dependent on technology.    

The KPMG Delivery Network (KDN) is a KPMG special purpose member firm offering a way for clients to leverage KPMG top talent and technology platforms through regional teams of specialists, enabling economies of scale and a new way of working that expands beyond local capability

As a member of KDN, you’ll be a part of the KPMG family working alongside some of our profession’s most skilled practitioners on rewarding programs and initiatives that are changing the way business operates, delivering value to our clients, and driving positive change in the communities we serve.

You’ll be enabling KDN accelerate new ways of working, using cutting-edge technology and working together with our member firms located in nearly 150 countries to help us achieve our ambition to be the most trusted and trustworthy professional services firm. 

And through your work, you’ll build a global network and unlock opportunities that you may not have thought possible with access to great support, vast resources, and an inclusive, supportive environment to help you reach your full potential.

Our KDN Bulgaria Cloud unit is focused on designing, building, securing and managing cloud native and hybrid platforms for the KPMG group of member firms, as well as providing cloud advisory and engineering services to external clients.

The role focuses on reducing manual effort, strengthening detection and response capabilities and improving analyst productivity through automation and AI. The role leverages technologies including Palo Alto Cortex XSOAR, Microsoft Security Copilot, GitHub Copilot, REST APIs, Model Context Protocol and cloud-native services. It is suited to a highly technical security professional who combines cybersecurity expertise with software engineering, automation and AI development skills.

• Design, build, deploy and support Palo Alto Cortex XSOAR playbooks, automations and integrations.
• Automate security investigation, enrichment, containment, remediation and reporting workflows.
• Develop reusable automation frameworks, shared engineering components and standardised workflows.
• Develop AI-powered security capabilities using Microsoft Security Copilot and other AI technologies.
• Build and maintain AI-assisted workflows that improve analyst productivity and investigation quality.
• Develop, integrate and evaluate AI agents and Model Context Protocol-enabled security solutions.
• Use GitHub Copilot and AI-assisted development practices to improve engineering efficiency and code quality.
• Develop integrations using REST APIs, SDKs, webhooks and custom connectors.
• Connect security platforms, threat intelligence sources, case-management systems and operational tools.
• Implement secure integration patterns and data exchange across security services.
• Support the deployment and validation of security detections and controls.
• Develop automation that improves alert quality and reduces manual analyst effort.
• Integrate automation into incident-response, threat-detection and threat-hunting workflows.
• Troubleshoot production issues and implement improvements that enhance platform reliability.
• Identify opportunities to optimise workflows, reduce repetitive tasks and improve operational efficiency.
• Use GitHub, source control and CI/CD pipelines to manage and deploy automation solutions.
• Ensure that automation and AI solutions meet applicable security, audit, governance and change-management requirements.

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
• 5+ years of experience in cybersecurity, security operations or security engineering.
• 3+ years of experience designing and building security automation solutions.
• Experience delivering automation within SOC, GSOC, CSIRT or security engineering environments.
• Strong understanding of incident response, threat detection, threat hunting and security analyst workflows.
• Hands-on expertise in Palo Alto Cortex XSOAR playbook development, integrations, orchestration and automation engineering.
• Experience with Microsoft Security Copilot and AI-driven security workflows.
• Experience using GitHub Copilot and AI-assisted software development practices.
• Knowledge of AI technologies, large language models, prompt engineering, Model Context Protocol and Agentic AI architectures.
• Experience developing or integrating MCP services, AI agents and agentic workflows.
• Strong knowledge of REST APIs, JSON, OAuth, webhooks, SDKs and enterprise integration patterns.
• Strong development and scripting skills in Python, PowerShell or an equivalent language.
• Experience developing integrations across multiple security platforms.
• Experience with GitHub, source control, CI/CD pipelines and modern software-engineering practices.
• Excellent communication skills in English.

• The chance to work in a top talent team
• Attractive remuneration
• Build knowledge in cutting-edge technologies
• Opportunity for continuous training, learning and certification
• Experience in an international and multicultural organization
• Work on challenging projects with clients in various industries around the globe
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.