Manager SOC - Cyber Security

Overview

You’ve got big plans. We have opportunities to match, and we’re committed to empowering you to become a better you, no matter what you do. When you join KPMG, you’ll be one of over 227,000 professionals providing audit, tax, advisory and business enablement services across 146 countries.  

With the support to do things differently, grow personally and professionally and bring your whole self to work, there’s no limit to the impact you can make. Let’s do this! The opportunity We are looking for a dynamic, experienced Cyber security professional to join our growing Cyber Security Services team as Senior Consultant KPMG’s leading cyber security practice provides a comprehensive suite of cyber security services, from cyber governance, strategy, defense and response, through to complete end-to-end cyber security transformation services.  

This is an exciting opportunity for talented, energetic people to join a practice that is experiencing significant growth. We are looking for candidates who have demonstrated academic, business and technical excellence, strong all-around capabilities, and fit with our culture. Individuals who can work in a dynamic, fluid and entrepreneurial environment will excel, and will find a wide range of opportunities within our growing practice. It is an excellent opportunity for those that are looking to work in a firm and department with great career progression opportunities and wanting to be part of building a premier cyber consulting team. 

 

Value to the Team: 

I contribute a substantial amount of practical experience to the team, specifically in the field of cybersecurity and incident response. My adeptness in Azure Sentinel, combined with my proficiency in KQL queries and Threat Use Cases Logic, establishes me as a significant resource. I excel in Incident Response and possess the capability to guide a team of SOC experts as an Incident Commander. Furthermore, I am skilled at clearly communicating the root cause and containment measures to external clients. 

 

I am well-versed in playbook automation, adept at crafting effective threat hunting queries, and familiar with EDR/XDR toolsets. Moreover, my background includes hands-on experience in tabletop exercises and collaboration with CSIRT teams. Please note that this role may involve off-hours shift coverage, rotations, or on-call duties. 


What you will do

 

- Serve as the primary point of contact during high-severity incidents, ensuring swift containment and resolution in collaboration with the CSIRT team, if necessary. 

- Assess escalated issues from L2 SOC analysts to determine increased risk to the business. 

- Review log data against security technology rules, proposing enhancements to threat detection. 

- Collaborate with SIEM Engineers to fine-tune security events and improve alert detection rates. 

- Develop and maintain incident response playbooks, identifying areas for improvement and suggesting task automation. 

- Work closely with CTI teams to enhance our threat detection, suggesting threat use cases development based on Tactics, Techniques, Procedures (TTPs). 

- Analyze critical events and security tickets to evaluate the effectiveness of incident management processes and suggest improvement plans. 

- Stay updated on security threats, countermeasures, security tools, and advancements in Cloud Security and SaaS technologies. 

- Track incidents against frameworks such as SANS and MITRE ATT&CK. 

- Provide technical and thought leadership within the SOC, guiding and teaching other analysts. 


What you bring to the role

  • Over 7 years of highly technical experience in a SOC environment. 

    - Relevant certifications such as CISSP, CISM, SANS, CISA, CompTIA Security+, or CompTIA CySA+, GIAC. 

    - Hands-on experience with Microsoft Sentinel or other SIEM and SOAR technologies. 

    - Proficient in Microsoft Defender Endpoint, CSPM/CWP, or similar technologies, with a focus on vulnerability assessment and recommendation. 

    - Experience in malware analysis and reverse engineering. 

    - Business development expertise, including research, analysis, and proposal writing. 

    - Evaluation of control frameworks, risk assessment, and opportunities for enhancement. 

    - Enterprise asset lifecycle management knowledge, including patch management, vulnerability management, security architecture, and endpoint management. 

    - Expertise in cloud transformation, architecture, and security operations. 

    - Leadership experience in managing complex projects. 

    - Strong communication skills, effectively presenting strategies, solutions, and insights to stakeholders. 

    - Leadership role experience, providing mentorship and knowledge sharing to the team and junior/intermediate analysts. 

 

KPMG Ontario Region Pay Range Information

The expected base salary range for this position is $73,500 to $122,500 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.

 

Providing you with the support you need to be at your best

 

Benefits Infographic English

 


Our Values, The KPMG Way

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

 

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.

 

Adjustments and accommodations throughout the recruitment process

 

At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.

 

AI Usage

 

We embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.

 

We believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.

 

Back to blog

Other Jobs To Apply

No other job posts for this day.

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...