Security Operations Analyst (Level 1)

About the role

The Security Operations Analyst (Level 1) joins KPMG's Security Operations Centre to monitor, triage and respond to security alerts across the enterprise. You will work with a range of security tools to detect threats, support incident investigations and help maintain the overall resilience of the SOC.

Key responsibilities

• Monitor security alerts from networks, endpoints, cloud platforms and security tooling.
• Perform initial triage to assess validity, severity and required response actions.
• Escalate confirmed or suspicious events to Level 2 analysts following SOC procedures.
• Document analysis, actions taken and outcomes in incident management systems.
• Support incident investigations by collecting evidence, validating alerts and executing defined response steps.
• Follow established playbooks for containment or remediation under senior guidance.
• Develop awareness of common threat types, attack techniques and indicators of compromise.
• Contribute to SOC documentation, runbooks and shift handover practices.

Required profile

• Strong analytical mindset with keen attention to detail.
• Basic understanding of network security principles and common cyber‑threats.
• Ability to follow structured processes and maintain accurate records.
• Willingness to learn on the job and collaborate with SOC team members.

Required skills

• Experience with SIEM tools for alert detection and analysis.
• Familiarity with incident management systems.
• Fundamental knowledge of network security concepts.
• Understanding of cloud security monitoring.