SOC Analyst (Night)

KPMG Canada; Quebec; On-site; CAD 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company as a SOC Analyst, where your expertise in cyber defense and incident response will protect organizations from evolving threats. In this dynamic role, you will monitor security events, analyze incidents, and collaborate with a dedicated team to ensure the safety of critical assets. Engage in a culture of continuous improvement and learning, where your contributions will have a significant impact on clients and communities. If you are passionate about cybersecurity and thrive in fast-paced environments, this opportunity is perfect for you.

Benefits

Health and dental insurance

Flexible work hours

Professional development opportunities

Employee assistance program

Remote work options

Wellness programs

Paid time off

Retirement savings plan

Qualifications

• Strong hands-on experience with EDR, NDR, and SIEM platforms.
• Ability to analyze logs and network traffic for malicious behavior.

Responsibilities

• Monitor and analyze security alerts from various tools.
• Investigate security incidents and recommend mitigation strategies.

Skills

Endpoint Detection & Response (EDR)

Network Detection & Response (NDR)

SIEM platforms

Kusto Query Language (KQL)

Incident Response

Threat Analysis

Log Analysis

Bilingual (French & English)

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Sentinel

SOAR

Forensic tools

Job description

Join to apply for the SOC Analyst (Night) role at KPMG Canada

Get AI-powered advice on this job and more exclusive features.

Overview
At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause turning insight into opportunity for clients and communities around the world.

Are you passionate about cyber defense, threat detection, and incident response? Do you thrive in fast-paced environments where real-time security investigations protect organizations from cyber threats? If so, we have an exciting opportunity for you!

We’re looking for a SOC Analyst to join our cybersecurity team and play a critical role in monitoring, analyzing, and responding to security events for multiple clients. As part of a major worldwide Managed Detection and Response (MDR) service provider, you will actively defend businesses against advanced cyber threats, ensuring their critical assets remain secure and resilient in the face of evolving attacks.

What You Will Do

• Alerts Triage & Incident Response
• Continuously monitor security alerts from SOAR, SIEM, and other security tools across multiple clients.
• Rapidly assess alerts, classify them by severity, type, and source, and escalate when necessary.
• Validate alerts with enrichment tools, logs, and threat intelligence to distinguish true threats from false positives.
• Prioritize and escalate security incidents requiring deeper investigation to senior analysts.

• Investigation & Threat Analysis
• Analyze security events to assess impact, scope, and affected systems.
• Leverage EDR, SIEM, NDR, and forensic tools to investigate threats.
• Identify patterns of malicious activity and potential threat actor tactics.
• Recommend mitigation strategies and response actions to minimize risks.

• Incident Management & Client Communication
• Maintain thorough documentation, including timestamps, affected systems, and initial findings.
• Communicate findings with clients, team leads, and stakeholders to ensure transparency and resolution.
• Take action through client security technologies (e.g., EDR, firewalls, and access controls) to contain and isolate incidents when necessary.
• Provide feedback on alert accuracy to improve SOC detection and triage processes.

• Hands-On Security Operations & Continuous Improvement
• Stay up to date with cyber threats, attack techniques, and evolving security best practices.
• Participate in cybersecurity training, threat-hunting exercises, and blue team collaborations.
• Assist colleagues during security incidents and contribute to an efficient team-based defense strategy.

Technical (Hard Skills)

• Strong hands-on experience with Endpoint Detection & Response (EDR), Network Detection & Response (NDR), and SIEM platforms.
• Ability to analyze logs, and network traffic to detect malicious behavior.
• Investigate incidents using security products alerts.
• Experience in Microsoft Sentinel (Kusto Query Language - KQL) for security investigations.

Interpersonal Skills (Soft Skills)

• Bilingual (French & English) - Excellent written and verbal communication skills to engage with clients effectively.
• Customer Service Mindset - Ability to engage professionally, clearly, and supportively with clients.
• Translate complex security incidents into clear explanations for non-technical stakeholders.
• Works effectively with peers in high-pressure situations.
• Ability to stay composed and make informed decisions under pressure.
• Detail-oriented and analytical thinking to spot anomalies and analyze incidents.
• Adapts quickly to evolving threats and finds effective solutions.
• Prioritizes alerts efficiently to meet response SLAs.

Keys to your success

KPMG individuals Deliver Impact | Seek Growth | Inspire Trust and understand that a diverse workforce enables us to deepen relationships and strengthen our business.

Providing you with the support you need to be at your best.

For more information about KPMG in Canada’s Benefits and well-being, click here.

Our Values, The KPMG Way

• Integrity, we do what is right
• Excellence, we never stop learning and improving
• Courage, we think and act boldly
• Together, we respect each other and draw strength from our differences
• For Better, we do what matters

KPMG in Canada is an equal opportunity employer committed to creating an inclusive, respectful, and barrier-free workplace. We welcome all qualified candidates to apply and bring their whole selves to work.

Adjustments and accommodations are available throughout the recruitment process. To request support, contact KPMG’s Employee Relations Service team at 1-888-466-4778.