Soc Analyst 1 - SIEM / Google Secops

KPMG Assurance and Consulting Services LLP; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

KPMG Assurance and Consulting Services LLP in Bengaluru is seeking a skilled SOC Analyst / Security Operations Engineer with 4+ years in cybersecurity and hands-on experience in Google SecOps (Chronicle). You will monitor, investigate, and respond to security incidents, develop detection use cases, and enhance security posture using SIEM and security technologies.

The role emphasizes incident response, threat hunting, log analysis across multiple devices, and collaboration with IT and security

Qualifications

• 4+ years of cybersecurity experience.
• Hands-on experience with Google SecOps / Chronicle SIEM.

Responsibilities

• Monitor, analyze, and investigate security alerts using Google SecOps / Chronicle SIEM.
• Perform incident triage, analysis, containment, eradication, and recovery.
• Develop, tune, and optimize detection rules, searches, and use cases.
• Conduct threat hunting to identify advanced threats and suspicious activity.
• Analyze logs from firewalls, EDR, IDS/IPS, proxies, email security, and cloud services.
• Investigate phishing, malware, ransomware, insider threats, and privilege misuse.
• Create and maintain incident response playbooks and SOPs.
• Support client audits, compliance requirements, and security assessments.
• Collaborate with IT, network, cloud, and application teams during investigations.
• Prepare incident reports, RCA, and dashboards.
• Stay updated on emerging threats and attack techniques.

Tools

Google SecOps / Chronicle SIEM

Job description

Job Summary

We are seeking a skilled and proactive SOC Analyst / Security Operations Engineer with 4+ years of cybersecurity experience and hands‑on expertise in Google SecOps (Chronicle). The ideal candidate will be responsible for monitoring, investigating, and responding to security incidents, developing threat detection use cases, performing threat hunting activities, and enhancing the organization's security posture through effective use of SIEM and security technologies.

Key Responsibilities

• Monitor, analyze, and investigate security alerts using Google SecOps (Chronicle SIEM).
• Perform incident triage, analysis, containment, eradication, and recovery activities.
• Develop, tune, and optimize detection rules, correlation searches, and use cases.
• Conduct threat hunting activities to identify advanced threats and suspicious activities.
• Analyze logs from multiple security devices including firewalls, EDR, IDS/IPS, proxy, email security, and cloud platforms.
• Investigate phishing, malware, ransomware, insider threats, and privilege misuse incidents.
• Create and maintain incident response playbooks and standard operating procedures.
• Support client audits, compliance requirements, and security assessments.
• Collaborate with IT, network, cloud, and application teams during security investigations.
• Prepare incident reports, Root Cause Analysis (RCA), and management dashboards.
• Stay updated on emerging cyber threats, vulnerabilities, and attack techniques.

Required Skills & Experience

Google SecOps (Mandatory)

• Hands‑on experience with Google SecOps / Chronicle SIEM.
• Expertise in log ingestion, parsing, normalization, and troubleshooting.oin>