Security Operations Analyst

About the team

KPMG’s Cyber Security Office protects the organisation, its clients, and digital environments from fast-changing cyber risks. The Security Operations Centre acts as the first line of defence, delivering continuous surveillance, threat identification, incident handling, and security operations support across enterprise and client environments.

You will join a cooperative team of cyber security specialists who are focused on defending critical systems, examining security events, and improving cyber resilience. This role offers a strong pathway for someone wanting to grow a career in cyber security while gaining hands-on exposure to modern security tools, threat detection methods, and incident response practices.

Your opportunity

As a Level 1 Security Operations Centre Analyst, you will monitor and assess security events, assist with incident investigations, and help keep the security operations function effective. Using leading security technologies, you will look for signs of threat activity, review alerts, and support response efforts under the direction of senior analysts.

This position suits someone with a real interest in cyber security, a strong appetite for learning, and the ability to perform in a busy operational setting. You will build practical technical, analytical, and investigative capability while helping protect important systems and business activity.

What makes you stand out

• You approach problems analytically, look for patterns, and use evidence to form sound conclusions.
• You pay close attention to detail, can work through information accurately, and keep clear records even when volumes are high.
• You communicate well, collaborate effectively, and contribute positively to shared team outcomes.

Key responsibilities

Security monitoring and alert triage

• Track security alerts and events across enterprise networks, endpoints, cloud services, and monitoring platforms.
• Carry out first-pass analysis of alerts to judge whether they are genuine, how serious they are, and what response is needed.
• Escalate confirmed or suspicious events to senior analysts in line with SOC processes.
• Record investigations, conclusions, and actions accurately in incident management systems.

Incident response support

• Assist with security incident investigations by gathering evidence, validating alerts, and performing defined response steps.
• Work in line with incident response playbooks and operating procedures.
• Help with containment and remediation tasks under supervision from senior SOC staff.
• Keep communication clear and coordinated during live incidents.

Threat analysis and investigation

• Build awareness of common cyber threats, attack methods, and indicators of compromise.
• Use SIEM and security monitoring tools to spot anomalies, suspicious behaviour, and new threats.
• Support senior analysts with investigative and analytical work.

Operational excellence

• Follow SOC workflows, procedures, and shift handover requirements.
• Maintain and improve SOC documentation, incident records, and operational playbooks.
• Look for ways to enhance processes, alert quality, and documentation standards.

Learning and collaboration

• Continue building cyber security knowledge through training and practical experience.
• Take part in knowledge-sharing discussions and lessons learned sessions.
• Work effectively with SOC colleagues, technology stakeholders, and wider cyber security teams.
• Support client and stakeholder interactions where the SOC provides managed or advisory services.

Experience and background

• Clear interest in cyber security and security operations.
• Basic understanding of cyber security concepts, threats, vulnerabilities, and defensive controls.
• Working knowledge of SIEM platforms or other security monitoring technologies.
• Ability to follow established processes and operate effectively in a structured environment.
• Strong written and spoken communication skills.
• Willingness to keep learning and strengthen technical and investigative capability.
• Prior experience in a Security Operations Centre, IT operations, service desk, technology support, or a similar environment.
• Exposure to cyber security monitoring, incident response, threat detection, or vulnerability management.
• Experience working within structured operational processes and escalation paths.

KPMG difference

KPMG offers a values-led environment that encourages curiosity, continuous learning, and professional development. The workplace is designed to welcome different perspectives and support an inclusive culture where people can thrive and do their best work.

Applications are encouraged from people of all backgrounds, experiences, and identities. If you are excited about cyber security and want to build your career in security operations, this could be a strong fit.

Qualifications

• A relevant tertiary qualification in Cyber Security, Information Technology, Computer Science, Information Systems, or a related field, or equivalent practical experience.

Preferred certifications and learning

• CompTIA Security+
• Microsoft Security Fundamentals (SC-900)
• Microsoft Security Operations Analyst (SC-200)
• Microsoft Azure Fundamentals (AZ-900)
• SOC Analyst, SIEM Fundamentals, Incident Response, or related cyber security training
• Demonstrated commitment to continuous professional development and ongoing learning in cyber security.

Additional information

KPMG is a professional services firm with global reach and deep industry experience. The firm works with clients across many sectors to solve complex problems, manage change, and support growth.

The culture values diverse thinking and teamwork. You will work with passionate, highly skilled colleagues who support one another and contribute to meaningful work in an inclusive and equitable environment.

KPMG supports flexible working in many ways, including flexible hours and locations, generous paid parental leave, and career breaks. Employees can also access retail discounts, health and wellbeing initiatives, learning and growth opportunities, salary packaging options, and other perks.

Recruitment support and adjustments are available for candidates with diverse needs. If you need additional assistance before submitting your application, you may contact the Talent Attraction Support Team.

At KPMG, every career path is different, and the organisation looks forward to how you grow with them.