GSOC Senior Analyst

Together with more than 273,000 colleagues in 143 countries throughout our member firms, people at KPMG imagine big ideas and bring solutions to life for clients both big and small. A role with KPMG International will open a world of opportunity in your career. KPMG International helps set the strategy and protects the reputation of this global organization of independent professional services firms providing Audit, Tax and Advisory services. We deliver value to our member firms and drive positive change in the communities we serve. By joining us, you will gain a unique understanding of how a global organization operates and work on projects that impact the whole organization.

From setting standards and best practices to developing innovative tech-enabled solutions for clients, you will be part of a global team changing the way our business operates. We look forward to welcoming you to our team.

About this GMT Area

The core services provided by Global Technology & Knowledge are crucial to our future, as we enable KPMG's digital transformation, provide trusted technology services, ensure security across the network, and accelerate our Collective Strategy. Our ways of working are based on customer-centricity, communities of expertise, an optimized delivery model, flexibility, a culture of empowerment, and fulfilling careers. We are organized under five new domains: Technology Portfolio Delivery, Global Enterprise Technology, Technology Strategy & Blueprint, Global Information Security Group, and Business Operations.

This is an exciting time for us as we continue to drive technology excellence at the heart of the firm's strategy, and our GT&K colleagues play a pivotal role in this success.

About this team

ITS Global (Information Technology Services Global) is one of four pillars within KPMG’s Global Technology & Knowledge group. ITS Global provides innovative components that KPMG’s business functions and member firms use to deliver client-facing solutions. It also provides the information protection and technology infrastructure that secures KPMG’s environment and connects its network of member firms. ITS Global collaborates with other GT&K pillars to leverage world-leading partnerships, disruptive digital capabilities, and access to the firm’s collective intelligence.

Role Summary

KPMG's Global Security Operations Center (GSOC) defends KPMG and its clients from cyber-attacks through timely detection, investigation, and remediation of threats. The role involves continuous investigation of security event feeds, escalation of incidents, and collaboration with Threat Intelligence and Vulnerability Management teams. You will support, advise, and mentor L1 and L2 shift Analysts, and take a lead during security incidents. This position requires the ability to complete the incident lifecycle independently, communicate effectively with management, and participate in GSOC projects.

Senior Analysts should possess expert knowledge in:

• Cloud monitoring technologies, especially Microsoft
• EDR technologies, especially Microsoft
• Information security policies and goals
• Log analysis and event traffic patterns
• DLP, encryption, firewall technology
• Current IT threat landscape and trends

Key accountabilities

• Act as Subject Matter Experts, supporting complex cases and guiding other analysts.
• Investigate incidents using SIEM, packet captures, reports, and data visualization.
• Analyze, escalate, and assist in critical incident remediation.
• Lead coordination during security incidents.
• Maintain documentation on residual risks and remediation steps.
• Document containment and remediation efforts to reduce risk.

This job is for you if you have:

• Bachelor's Degree in Computer Science, Networking, Security, or equivalent; Master’s preferred.
• Significant security experience preferable.
• Strong understanding of algorithms, data structures, databases, OS, networks, and tool development.
• Ability to evaluate and improve GSOC processes.
• Excellent communication skills.
• Relevant certifications such as CISSP, CISA, CISM, GSEC, GISP, or vendor-specific security tool certifications.
• Experience with Microsoft Cloud security tools.
• Knowledge of network forensics, packet analysis, infrastructure, and security exploits.
• Troubleshooting skills for network devices and vulnerabilities.