KPMG Hiring SOC Analyst - Consulting Implementation | Gurgaon

Job Description

Monitor, analyse and escalate SIEM alerts based on defined correlation rules. Handle email protection alerts, malware analysis, and provide inputs for proactive content tuning and use case enablement.

Carry out active threat hunting using network flow, user behaviour, and threat intelligence. Analyse phishing emails for MFs and raise incidents in Pastebin investigations.

Candidates should have familiarity with cyber security domain knowledge, threat hunting, SIEM tools such as Azure Sentinel, RSA, Splunk or LogRhythm, Python scripting, Windows Active Directory, operating systems, and servers.

• Support triage and incident assignment handling
• Follow incident response playbooks and SOC procedures
• Interpret HTTP, SMTP, and network logs under guidance
• Understand and align with existing SOC processes
• Conduct quality assessments on SOC operations
• Track process deviations through tools and spreadsheets
• Coordinate with error owners to address identified gaps
• Identify trends and patterns in process deviations and errors
• Perform RCA for observed issues and recommend improvements
• Generate personnel-specific recommendations for performance improvement
• Support quality assessment activities across SOC verticals
• Work closely with SOC operations for quick detection and prevention of process deviations
• Act as a QA touchpoint during critical cyber incidents
• Assess investigation reports, evidence, assertions, and recommended actions

Requirements

• BE/B.Tech/Post-Graduate/Graduate in any discipline
• 0-2 years of relevant experience
• Willingness to work in rotational shifts
• SOC certifications such as CSA, CISM, CCSP, or Microsoft Azure certifications are preferred
• Prior SOC experience will be an advantage
• Good knowledge of Microsoft Word, PowerPoint, and Excel
• Understanding of analytics concepts, trends, drill-downs, and graphical reporting
• Knowledge of Windows, Azure, or AWS infrastructure is an added advantage
• Experience with Microsoft security tools including Defender for Office, Defender for Identity, and Sentinel is preferred
• Strong written and verbal communication skills