Soc Analyst

Job Discribtion:

Global Security Operation Center (GSOC)

KPMGs Global Security Operations Centre (GSOC) is internal SOC team supporting KPMG member firms to detect and respond to cyber-attacks to KPMG across locations.

• GSOC Operation – Monitoring & Alerting (M&A)
• GSOC – Engineering Services (ES) – SIEM technology management including onboarding /off-boarding /content update.

Role & REsPonsibilty – Analyst (Monitoring & Alerting)

• Actively monitoring, analysing & escalating SIEM alerts based on correlation rules,
• Email protection alerts & malware analysis,
• Provide inputs for proactive content fine tuning & use case enablement,
• Active threat hunting on network flow, user behaviour & threat intelligence,
• Phishing email analysis for MFs,
• Raising incidents in Pastebin inte
• Should be familiar with Domain Knowledge (Cyber Security), Threat Hunting, SIEM- Azure Sentinel, SIEM - (RSA / Splunk / LogRhythm), Python Scripting, Windows Active Directory, Operating systems and servers.
• Ability to Triage and assignment Incident Handling.
• Ability to Follow Playbooks instructions- Incident Response Playbooks
• Ability to Comprehend Logs (HTTP, SMTP, Network) (Under guidance)
• Understand and imbibe current SOC process
• Perform quality assessment on SOC operations being performed as per existing process
• Record and deviations identified into tracking tool(s)/spreadsheets
• Perform follow-ups with respective error owners to mitigate process deviations
• Identify process deviations, Summarize and generate trends, patterns into process deviations / errors observed.
• Perform RCA into observed errors / trends and generate recommendations for process improvement
• Generate personnel specific recommendations for performance enhancement
• Contribute in overseeing quality assessment process for multiple SOC verticals
• In-line alignment with SOC operations for quick-detection / prevention of process deviations
• Support as QA touchpoint in critical cyber incidents to enhance quality of service
• Assessment of investigation report with assertions, evidences and recommended actions
• Communicate effectively and collaborate with teams in different geographie