Senior Security Operations Analyst
Posted Updated
Description
We’re looking for a Senior Security Operations Analyst to join our Technology team and play a key role in protecting our environment from evolving cyber threats.
This is a hands-on role with a strong focus on vulnerability management, working across technology and application teams to identify security weaknesses, understand the real-world risk they present, and drive remediation through to completion.
You’ll work with security platforms including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk, using data and threat context to ensure we focus our efforts where they matter most.
Day to day you will:
- Own day-to-day vulnerability management, from identification and assessment through to remediation.
- Analyse and correlate findings across tools including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk.
- Prioritise vulnerabilities based on severity, exploitability, internet exposure, attack paths and business criticality.
- Partner with infrastructure, application and platform teams to establish clear remediation ownership and timeframes.
- Create and manage remediation tickets, track progress and follow up on overdue or high-risk vulnerabilities.
- Monitor remediation against agreed vulnerability SLAs and escalate exceptions or emerging risks.
- Help maintain accurate asset ownership and criticality information to enable effective, risk-based prioritisation.
- Produce meaningful reporting across security exposure, remediation performance, vulnerability ageing, backlog and emerging trends.
- Support security governance, audit and risk activities by providing clear evidence, metrics and remediation updates.
- Look for opportunities to improve vulnerability management processes through automation and smarter ways of working.
- Contribute across the wider Security Operations function, including vulnerability triage, threat-driven investigations and security incident support.
About you:
- Similar experience in cyber security, vulnerability management, Security Operations or a related technology security role.
- Hands-on experience with vulnerability scanning, SIEM, XDR or EDR security tools.
- Strong analytical skills with an understanding of vulnerability risk, exploitability, attack paths and prioritisation.
- Exposure to tools such as Microsoft Defender XDR, Microsoft Sentinel and/or frameworks such as MITRE ATT&CK.
- Strong communication and stakeholder skills, with the ability to turn security findings into clear actions and drive remediation through to completion.
- Experience with PowerShell, Python or security automation would be an advantage.
- Relevant certifications such as Security+, CySA+, SC-200 or CISSP would be beneficial.
$115,000- $125,000 The salary banding provided serves as an indication of the market rate for this role. The salary offer will be determined based on the candidate's skills, experience, expertise, qualifications and relativities.
Recruitment Agencies: The recruitment for this role is being managed directly by the KPMG Talent Acquisition team. We will contact our preferred agency partners if we require agency assistance. Thank you for your understanding.
Life at KPMG
KPMG values diversity in the workforce and we encourage candidates from diverse backgrounds to apply for roles, including individuals with a disability, additional mental health needs, chronic health conditions or who identify as neurodivergent.
For disabled and neurodiverse candidates, if you encounter accessibility barriers or if you have access needs and require support to participate equitably in the recruitment process, please email Emma at KPMGAccessibilityNetwork@kpmg.co.nz.
For any general questions about the role or recruitment process, feel free to reach out to our Talent Acquisition team at Jobs@kpmg.co.nz.
We offer rewarding careers to talented individuals and a holistic range of benefits to support your life balance, whatever your circumstance. We want you to do Work That Matters, Thrive and Grow and know that you Belong here with us, at KPMG.
As a KPMG employee, we will offer you:
— Access to the firm's annual incentive scheme
— Opportunities for local and international secondments
— Hybrid working across a mix of office, client and home hubs to recognise that people have individual circumstances and preferences when it comes to where and how they work
— The ability to work from overseas and extend time connecting with friends and family outside New Zealand
— Flexible leave options, including the ability to purchase additional annual leave
— Gender-neutral support for all stages of the parental journey, including access to 18 weeks of fully paid parental leave for all new parents
— A paid professional association membership of your choice
— Digital accreditations through our partnership with Microsoft, LinkedIn Learning, with bespoke learning pathways for all employees
— A wide-range of special offers and discounts on insurances, banking services, and lifestyle goods and services
— The support, allyship and opportunity to join our many Inclusion, Diversity and Equity Affinity networks, including the Kiwa, Pride, Ethnicity, Accessibility and Wahine groups
— The opportunity to participate in Green Team activities, as we work toward reducing the firm’s environmental footprint and become carbon zero by 2030
— An invitation to join your local Social club and enjoy events aimed at bringing people together for social, sporting, cultural, family and fundraising activities
— Paid time off for volunteering and involvement in citizenship activities
— An array of health and wellness benefits such as free flu vaccinations, subsidised sporting events, free confidential counselling services, additional 5 days of Wellbeing leave to support you and your family's overall health and wellness, access to our Wellbeing portal with an extensive range of advice and resources and much much more!
We believe that diversity of background and experience strengthens relationships and delivers meaningful benefits to our people, clients and communities. Our goal is to be recognised as an employer of choice for all, irrespective of gender, ethnicity, generation, flexible work status, family circumstances, sexual orientation or disability. Further info can be found on our website.
Skills
As published by lever · 22 questions · 2 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Other URL
Short answers (1)
- Please indicate your salary expectations in NZD
Pick from a list (18)
- Do you have any criminal convictions (not including any concealed under the Clean Slate Act) or are you awaiting the hearing of charges in a civil or criminal court of law? optional
- Have you ever been declared bankrupt? optional
- Have you ever been dismissed from any employment? optional
- Are you currently an elected official or have you held a role with a government entity or regulator in the past 3 years? https://assets.kpmg.com/content/dam/kpmg/nz/pdf/2023/09/government-entities-and-regulators.pdf optional
- If yes to the question above, and the role held was with a government entity, please advise whether it was a senior or sensitive position optional
- Are there any other factors that would affect your ability to accept this or any other position with KPMG? (e.g. Restraint of Trade) optional
- Are you currently located in New Zealand? optional
- If not, where is your current location? optional
- To be legally entitled to work in New Zealand, you should be a citizen or permanent resident of New Zealand or hold a current work visa. Please select the appropriate answer relevant to your current situation. optional
- What is your contractual notice period? optional
- This information is being collected to enable KPMG to assess your suitability for this position and will be used for this purpose only. If you fail or refuse to provide the information requested, then your application may be rejected by KPMG. If you provide false or inaccurate information, this will be considered serious misconduct and may result in dismissal, should you be employed by KPMG. Please also note that any false information given regarding any disabilities or medical conditions, may result in your loss of entitlement to compensation from ACC / Health and Disability Insurance. Information on ethnicity and gender will be used for Equal Employment Opportunities (EEO) statistical reporting only. optional
- I declare that all representations, whether oral or in writing, made by me when applying for this position are true and correct. I have not deliberately failed to disclose any matter that may materially influence KPMG’s decision to employ me. I understand that if the firm’s pre-selection checks uncover any adverse information or if false information is given or material suppressed by me, I may not be offered employment, or if a contract has been offered, it may be withdrawn. optional
- Declaration: You have answered the above questions in relation to your application for employment, to assist KPMG to assess your suitability for this position. The questions posed are relevant to the nature and type of work undertaken in KPMG and comply with the rights and obligations under legislation, including the Immigration Act 1987, the Health and Safety in Employment Act 1992, the Health & Safety in Employment Amendment Act 2002, and the Human Rights Act 1993. The information will be used by KPMG to assess you for this purpose only. Should you be unsuccessful, we shall retain this information in accordance with the Privacy Act 2020. optional
- Gender optional
- Which ethnicity do you identify with primarily? optional
- Do you identify with a secondary or more specific ethnicity? If so, please specify here. optional
- Do you identify with a third ethnicity? If so, please specify below. optional
- KPMG values diversity in the workforce and we encourage candidates from diverse backgrounds to apply for roles, including individuals with a disability, additional mental health needs, chronic health conditions or who identify as neurodivergent. Do you anticipate that we will need to adjust our recruitment process to make it more accessible for you (this could include online testing, telephone interview, face to face interview and written assessment)? optional
Written answers (2)
- If you are successful in the recruitment process, when would you be able to commence employment with KPMG?
- If you wish to elaborate on any of the above questions, please do so here: optional
Attachments (1)
- If you currently hold a work or study visa, please upload a copy of this here: optional