KPMG is one of the "Big Four" global professional services firms, providing a comprehensive range of audit, tax, and advisory services. Operating as a network of independent member firms in over 140 countries, the organization employs hundreds of thousands of professionals and serves major corporations, governments, and non-profits across diverse sectors including financial services, technology, and healthcare.

In Spain, KPMG maintains a robust presence with a network of offices in major economic hubs, making it a key player in the Spanish professional services market. The firm is a significant recruiter of international talent, particularly within its technology, cybersecurity, and digital transformation divisions, where English is frequently used. For international professionals, KPMG Spain offers structured career progression and a multicultural environment that facilitates integration into the local business landscape.

KPMG was formed in 1987 through the merger of Peat Marwick International and Klynveld Main Goerdeler. Its history dates back to the late 19th century through the founding work of its namesakes: Klynveld, Peat, Marwick, and Goerdeler.

For international professionals

KPMG Spain operates 16 offices across the country, providing opportunities in cities beyond just Madrid and Barcelona.
The firm has a strong focus on digital innovation, frequently hiring for specialized roles in AI, Cloud Infrastructure, and Data Analytics.
They offer structured 'Graduate' and 'Rocket' programs which are excellent entry points for international junior professionals.
English is often the primary working language for international client projects and technology-focused departments.
The company supports internal global mobility, making it easier for employees to transfer between international member firms.

Tech Program - Cyber Managed Detection and Response Madrid - October 2026

KPMG

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

Intern - Managed Detection and Response (MDR) - MadridTech Program - KPMG | Cyber Defense Area (SOC/MDR)

Are you attracted to cyber defense, incident response, and working in a real SOC?

Join the KPMG Tech Program in Madrid - Managed Detection and Response (MDR) Area.

We are looking for master's students in engineering or computer science eager to learn in an applied offensive/defensive security environment, helping to protect our clients through threat detection, analysis, and response. In the MDR team, we transform alerts, logs, and playbooks into containment actions that tangibly reduce risk.

What kind of projects will you participate in?

From real-time monitoring on SIEM and XDR platforms, to guided investigations of alerts and automation with SOAR. You will collaborate on simulation exercises, the creation of operational reports, and improvements to SOC procedures, always with the support of L2/L3 analysts.

What will you do?

In MDR Operations (SOC):
- Review basic alerts in SIEM/XDR.
- Classify events following the SOC playbooks.
- Investigate simple alerts under the supervision of the L2/L3 team.
- Support containment, e.g., blocking IPs or isolating devices (where applicable).
- Document findings and update tickets in the SOC tools.
- Prepare draft reports with conclusions and actions taken.

In Intelligence and Automation:
- Perform basic OSINT searches to enrich the analysis.
- Learn and use SOC tools (SIEM, XDR, SOAR) and automation flows.

In Team and Learning: Participate in internal training, dailies, and knowledge-sharing sessions.

What are we looking for?

Academic background: Undergraduate students in Computer Engineering, Telecommunications, or similar. A Master's in Cybersecurity is valued.
Interest in SOC/MDR, networking, systems, and detection/response (SIEM, XDR, SOAR).
Analytical profile, structured thinking, and good written/oral communication.
English at a high level.
Ability to sign an internship agreement starting from October 2026.
Eagerness to learn, contribute, and grow in a highly technological environment.

What do we offer?

Internship in an innovative, expert, and collaborative environment.
Flexible hours to balance with your studies.
Continuous training and mentoring from senior professionals.
Excellent atmosphere and development opportunities.

Location: Madrid
Work model: Hybrid
Flexible hours

View original advert (Spanish)

Becario/a - Managed Detection and Response (MDR) - MadridTech Program - KPMG | Área de Ciberdefensa (SOC/MDR)

¿Te atrae la ciberdefensa, la respuesta a incidentes y el trabajo en un SOC real?

Únete al Tech Program de KPMG en Madrid - Área de Managed Detection and Response (MDR).

Buscamos estudiantes de máster en ingeniería o informática con ganas de aprender en un entorno de seguridad ofensiva/defensiva aplicada, ayudando a proteger a nuestros clientes mediante detección, análisis y respuesta ante amenazas. En el equipo de MDR, transformamos alertas, registros y playbooks en acciones de contención que reducen riesgo de manera tangible.

¿En qué tipo de proyectos participarás?

Desde el monitorizado en tiempo real en plataformas SIEM y XDR, hasta investigaciones guiadas de alertas y automatización con SOAR. Colaborarás en ejercicios de simulación, elaboración de informes operativos y mejoras de procedimientos del SOC, siempre con apoyo de analistas N2/N3.

¿Qué harás?

En Operaciones MDR (SOC):
- Revisar alertas básicas en SIEM/XDR.
- Clasificar eventos siguiendo los playbooks del SOC.
- Investigar alertas sencillas bajo supervisión del equipo N2/N3.
- Apoyar la contención, p. ej., bloquear IPs o aislar equipos (cuando aplique).
- Documentar hallazgos y actualizar tickets en las herramientas del SOC.
- Preparar borradores de informes con conclusiones y acciones realizadas.

En Inteligencia y Automatización:
- Realizar búsquedas OSINT básicas para enriquecer el análisis.
- Aprender y usar herramientas del SOC (SIEM, XDR, SOAR) y flujos de automatización.

En Equipo y Aprendizaje: Participar en formaciones internas, dailies y sesiones de intercambio de conocimiento.

¿Qué buscamos?

Formación académica: Estudiantes de Grado en Ingeniería Informática, Telecomunicaciones o similares. Valorable Máster en Ciberseguridad.
Interés por SOC/MDR, redes, sistemas y detección/respuesta (SIEM, XDR, SOAR).
Perfil analítico, pensamiento estructurado y buena comunicación escrita/oral.
Inglés a nivel alto.
Posibilidad de firmar convenio de prácticas a partir de octubre de 2026.
Ganas de aprender, aportar y crecer en un entorno altamente tecnológico.