KPMG Hiring Analyst - Consulting Implementation (Bangalore)

About KPMG in India

KPMG entities in India are professional services firms affiliated with KPMG International Limited. The organization began operations in India in August 1993 and operates as part of a global network of member firms.

Teams combine global expertise with knowledge of local regulations, markets, and competition. KPMG India serves national and international clients across industries, delivering performance-driven, industry-focused, and technology-enabled services.

The firm has offices across major Indian cities including Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara, and Vijayawada.

Key Responsibilities

• Monitor, analyze, and escalate SIEM alerts based on correlation rules.
• Review email protection alerts and perform malware analysis.
• Provide inputs for proactive content tuning and enablement of security use cases.
• Conduct threat hunting using network flow data, user behavior patterns, and threat intelligence.
• Analyze phishing emails and support investigations.
• Raise incidents and document findings within appropriate tracking systems.
• Triage and assign incidents while following established incident response playbooks.
• Review and interpret logs such as HTTP, SMTP, and network logs under guidance.
• Understand and follow existing SOC operational processes.
• Perform quality assessments on SOC operations and document any deviations identified.
• Track process gaps or errors in designated tools or spreadsheets and follow up with owners to resolve them.
• Identify recurring process deviations, summarize patterns, and generate trend reports.
• Perform root cause analysis for observed issues and suggest improvements.
• Create personnel-specific recommendations to enhance operational performance.
• Support quality assessment activities across multiple SOC verticals.
• Work closely with SOC operations teams to detect or prevent process deviations quickly.
• Act as a QA support point during critical cyber incidents to maintain service quality.
• Assess investigation reports, ensuring assertions, evidence, and recommended actions are properly documented.

Technical Environment

• Security monitoring and threat hunting using SIEM tools.
• Working with technologies such as Azure Sentinel and other SIEM platforms.
• Use of Windows security tools and Microsoft security ecosystem including Defender products.
• Infrastructure exposure across Windows, Azure, and AWS environments.
• Use of Microsoft productivity tools for documentation and reporting.

This role may require working in rotational shifts depending on operational needs.