Senior Security Operations Analyst — Hybrid Role & Remediation

KPMG New Zealand; Auckland; Hybrid; NZD 115,000 - 125,000; Full time

Benefits offered by this job

Annual incentive scheme

Local and international secondments

Hybrid working across office, client,

Job summary

KPMG New Zealand is seeking a Senior Security Operations Analyst to protect our environment from evolving cyber threats. This hands-on role focuses on vulnerability management, working with technology and application teams to identify weaknesses, assess real-world risk, and drive remediation to completion.

You will work with leading security platforms like Qualys, Defender, GitHub Advanced Security and Snyk, prioritising work based on risk and business priority while contributing to governance

Qualifications

• Hands-on vulnerability management experience.
• Experience with vulnerability scanning tools and security platforms.
• Strong analytical skills with ability to translate findings into remediation actions.
• Certifications such as Security+, CySA+, SC-200 or CISSP are beneficial.

Responsibilities

• Own day-to-day vulnerability management from identification to remediation.
• Analyse and correlate findings across tools (Qualys, Defender, GitHub AS, Snyk).
• Prioritise vulnerabilities by severity, exploitability, exposure and business impact.
• Partner with infrastructure, application and platform teams to establish remediation ownership and timeframes.
• Create and manage remediation tickets and track progress.
• Monitor remediation against SLAs and escalate risks.
• Maintain asset ownership and criticality data for risk-based prioritisation.
• Produce reporting on exposure, remediation performance and trends.
• Support governance, audit and risk activities with evidence and updates.
• Identify opportunities to automate vulnerability management processes and improve efficiency.
• Contribute to the wider Security Operations function including triage and incident support.

Skills

Vulnerability management

Analytical thinking

Stakeholder communication

Security automation

Tools

Qualys

Microsoft Defender

GitHub Advanced Security

Snyk

SIEM

PowerShell

Python

MITRE ATT&CK

Microsoft Sentinel

Job description

KPMG New Zealand is seeking a Senior Security Operations Analyst to protect our environment from evolving cyber threats. This hands-on role focuses on vulnerability management, working with technology and application teams to identify weaknesses, assess real-world risk, and drive remediation to completion.

You will work with leading security platforms like Qualys, Defender, GitHub Advanced Security and Snyk, prioritising work based on risk and business priority while contributing to governance