Description
The Lead SOC Analyst is a senior member of the Incident Response & Investigations team within the Operational Security function of KPMG Group Digital.
This role provides advanced technical expertise in detection, investigation, and response to cybersecurity incidents. Operating at Grade D, the Lead SOC Analyst acts as a senior escalation point within the SOC, handling complex and high‑severity incidents, supporting junior analysts during investigations, and contributing to the effective day‑to‑day operation of SOC processes and tooling.
The role is hands‑on and technically focused, with responsibility for the quality and accuracy of investigations performed, rather than formal people or operational management.
Responsibilities
Incident Response & Investigation:
• Perform triage, investigation, containment, and remediation activities for complex and high‑severity cybersecurity incidents.
• Act as a senior technical escalation point during incident handling, providing guidance and direction to analysts as required.
• Participate in incident bridges,
contributing explicit technical updates and investigative findings.
• Conduct forensic data collection and analysis across endpoints, network, cloud, and identity sources.
• Produce accurate and well‑structured incident timelines, investigation notes, and post‑incident summaries.
• Support post‑incident reviews by contributing technical insights and lessons learned.
Detection & Threat Monitoring:
• Review and investigate alerts generated from SIEM, EDR, cloud security, and identity platforms.
• Support the tuning and refinement of detection rules to improve alert quality and reduce false positives.
• Conduct threat‑hunting activities under defined hypotheses, using available telemetry and analytical techniques.
• Identify gaps in visibility or logging and raise these with senior analysts or engineering teams.
SOC Tooling & Automation Support:
• Use SOC tooling effectively to support investigations and response ac
📌 Lead SOC Analyst-Assistant Manager-MFT-KGS CH (Gurugram)
🏢 BSR
📍 Gurugram