Senior Security Operations Analyst

KPMG; Auckland; Hybrid; NZD 115,000 - 125,000; Full time

Benefits offered by this job

Annual incentive scheme

Local and international secondments

Hybrid working across office, client,

Job summary

KPMG New Zealand is seeking a Senior Security Operations Analyst to protect our environment from evolving cyber threats. This hands-on role focuses on vulnerability management, working with technology and application teams to identify weaknesses, assess real-world risk, and drive remediation to completion.

You will work with leading security platforms like Qualys, Defender, GitHub Advanced Security and Snyk, prioritising work based on risk and business priority while contributing to governance

Qualifications

• Hands-on vulnerability management experience.
• Experience with vulnerability scanning tools and security platforms.
• Strong analytical skills with ability to translate findings into remediation actions.
• Certifications such as Security+, CySA+, SC-200 or CISSP are beneficial.

Responsibilities

• Own day-to-day vulnerability management from identification to remediation.
• Analyse and correlate findings across tools (Qualys, Defender, GitHub AS, Snyk).
• Prioritise vulnerabilities by severity, exploitability, exposure and business impact.
• Partner with infrastructure, application and platform teams to establish remediation ownership and timeframes.
• Create and manage remediation tickets and track progress.
• Monitor remediation against SLAs and escalate risks.
• Maintain asset ownership and criticality data for risk-based prioritisation.
• Produce reporting on exposure, remediation performance and trends.
• Support governance, audit and risk activities with evidence and updates.
• Identify opportunities to automate vulnerability management processes and improve efficiency.
• Contribute to the wider Security Operations function including triage and incident support.

Skills

Vulnerability management

Analytical thinking

Stakeholder communication

Security automation

Tools

Qualys

Microsoft Defender

GitHub Advanced Security

Snyk

SIEM

PowerShell

Python

MITRE ATT&CK

Microsoft Sentinel

Job description

We’re looking for a Senior Security Operations Analyst to join our Technology team and play a key role in protecting our environment from evolving cyber threats.

This is a hands‑on role with a strong focus on vulnerability management, working across technology and application teams to identify security weaknesses, understand the real‑world risk they present, and drive remediation through to completion.

You’ll work with security platforms including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk, using data and threat context to ensure we focus our efforts where they matter most.

Day to day you will:

• Own day-to-day vulnerability management, from identification and assessment through to remediation.
• Analyse and correlate findings across tools including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk.
• Prioritise vulnerabilities based on severity, exploitability, internet exposure, attack paths and business criticality.
• Partner with infrastructure, application and platform teams to establish clear remediation ownership and timeframes.
• Create and manage remediation tickets, track progress and follow up on overdue or high-risk vulnerabilities.
• Monitor remediation against agreed vulnerability SLAs and elevate exceptions or emerging risks.
• Help maintain accurate asset ownership and criticality information to enable effective, risk‑based prioritisation.
• Produce meaningful reporting across security exposure, remediation performance, vulnerability ageing, backlog and emerging trends.
• Support security governance, audit and risk activities by providing clear evidence, metrics and remediation updates.
• Look for opportunities to improve vulnerability management processes through automation and smarter ways of working.
• Contribute across the wider Security Operations function, including vulnerability triage, threat‑driven investigations and security incident support.

About you:

• Similar experience in cyber security, vulnerability management, Security Operations or a related technology security role.
• Hands‑on experience with vulnerability scanning, SIEM, XDR or EDR security tools.
• Strong analytical skills with an understanding of vulnerability risk, exploitability, attack paths and prioritisation.
• Exposure to tools such as Microsoft Defender XDR, Microsoft Sentinel and/or frameworks such as MITRE ATT&CK.
• Strong communication and stakeholder skills, with the ability to turn security findings into clear actions and drive remediation through to completion.
• Experience with PowerShell, Python or security automation would be an advantage.
• Relevant certifications such as Security+, CySA+, SC-200 or CISSP would be beneficial.

$115,000- $125,000 The salary banding provided serves as an indication of the market rate for this role. The salary offer will be determined based on the candidate's skills, experience, expertise, qualifications and relativities.

Life at KPMG

KPMG values diversity in the workforce and we encourage candidates from diverse backgrounds to apply for roles, including individuals with a disability, additional mental health needs, chronic health conditions or who identify as neurodivergent.

For disabled and neurodiverse candidates, if you encounter accessibility barriers or if you have access needs and require support to participate equitably in the recruitment process, please email Emma at [e-mail].

For any general questions about the role or recruitment process, feel free to reach out to our Talent Acquisition team at [e-mail].

We offer rewarding careers to talented individuals and a holistic range of benefits to support your life balance, whatever your circumstance. We want you to do Work That Matters, Thrive and Grow and know that you Belong here with us, at KPMG.

As a KPMG employee, we will offer you:

— Access to the firm's annual incentive scheme

— Opportunities for local and international secondments

— Hybrid working across a mix of office, client and home hubs to recognise that people have individual circumstances and preferences when it comes to where and how they work

— The ability to work from overseas and extend time connecting with friends and family outside New Zealand

—Flexible leave options, including the ability to purchase additional annual leave

— Gender-neutral support for all stages of the parental journey, including access to 18 weeks of fully paid parental leave for all new parents

— A paid professional association membership of your choice

— Digital accreditations through our partnership with Microsoft, LinkedIn Learning, with bespoke learning pathways for all employees

— A wide-range of special offers and discounts on insurances, banking services, and lifestyle goods and services

— The support, allyship and opportunity to join our many Inclusion, Diversity and Equity Affinity networks, including the Kiwa, Pride, Ethnicity, Accessibility and Wahine groups

—The opportunity to participate in Green Team activities, as we work toward reducing the firm’s environmental footprintand become carbon zero by 2030

—An invitation to join your local Social club and enjoy events aimed at bringing people together for social, sporting, cultural, family and fundraising activities

—Paid time off for volunteering and involvement in citizenship activities

—An array of health and wellness benefits such as free flu vaccinations, subsidised sporting events, free confidential counselling services, additional 5 days of Wellbeing leave to support you and your family's overall health and wellness, access to our Wellbeing portal with an extensive range of advice and resources and much much more!

We believe that diversity of background and experience strengthens relationships and delivers meaningful benefits to our people, clients and communities. Our goal is to be recognised as an employer of choice for all, irrespective of gender, ethnicity, generation, flexible work status, family circumstances, sexual orientation or disability. Further info can be found on our website.