search Browse Jobs
SOC Analyst Level 2 - Cyber SecurityKPMG Canada · Toronto, Ontario, Canada
KPMG Canada logo

KPMG Canada

company page ↗

SOC Analyst Level 2 - Cyber Security

🗓️ Posted 2026-08-31 Toronto, Ontario, Canada Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 5,833 CAD–9,167 CAD/mo

About the Company

KPMG continues to build on our member firms' successes thanks to our clear vision, maintained values, and our people. KPMG LLP is the Canadian member firm of KPMG International. We provide Audit, Tax, and Advisory services to many of the public and private business, not-for profit, and public sector organizations in Canada. Nationally, there are 40 offices and over 700 partners and more than 10,000 employees working together to help Canadian businesses achieve their goals. Leveraging the skills, knowledge and passion of our firm and our people allows us to serve our clients with uncompromising professionalism, cutting through complexity to provide valuable insight-in Canada and around the world. KPMG s.r.l./S.E.N.C.R.L. est le cabinet canadien membre de KPMG International Cooperative ( KPMG International ). Nous offrons des services professionnels en audit et en fiscalité ainsi que des services-conseils à une vaste clientèle composée notamment de sociétés ouvertes et fermées, d'organismes sans but lucratif et d'organisations du secteur public au Canada. KPMG compte 40 bureaux à l'échelle nationale, au sein desquels collaborent plus de 700 associés et plus de 10 000 employés pour aider les sociétés canadiennes à atteindre leurs objectifs. Nous misons sur les compétences et le savoir-faire de notre équipe pour servir nos clients au Canada et ailleurs dans le monde avec rigueur et professionnalisme. Notre mission première : simplifier la complexité en proposant des perspectives éclairantes. Financial Services Specialties: Audit, Tax, Advisory, KPMG Enterprise, Vérification, Fiscalité, Services-conseils, KPMG Entreprise

About the Role

At KPMG in Canada, our people bring their unique perspectives to Canada's most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference. Are you a talented leader with a proven track record for motivating teams and delivering exceptional client service Our Cyber Managed Services team in Toronto is looking for a professional like you with the skills and drive to make a real difference. The expected base salary range for this position is 73,500 to 122,500 and may be eligible for bonus awards. The determination of an applicant's base salary within this range is based on the individual's location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program. Providing you with the support you need to be at your best Our Values, The KPMG Way Integrity , we do what is right Excellence , we never stop learning and improving Courage , we think and act boldly Together , we respect each other and draw strength from our differences For Better , we do what matters KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice. Adjustments and accommodations throughout the recruitment process At KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra

Responsibilities

  • ● Receive escalation from L1 SOC analyst to determine increased risk to the business
  • ● Review log data against security technology rules and filters to propose further improvements to threat detection
  • ● Coordinate with SIEM Engineers to tune events, improve event correlation, performance, and alerts
  • ● Develop, create and maintain incident response playbooks. This includes identifying areas of potential improvement by reviewing redundant tasks, security incidents and providing task automation suggestions
  • ● Perform log analysis from multiple data sources to analyze technical data, extracting Tactics, Techniques, Procedures (TTP) and malware attributes
  • ● Provide support in the analysis of critical events and security tickets to evaluate the effectiveness and efficiency of the incident management process and develop any necessary improvement plans.
  • ● Maintain up-to-date understanding of security threats, countermeasures, security tools and Cloud Security and SaaS technologies.
  • ● Experience tracking incidents against a framework such as SANS and MITRE ATT&CK.
  • ● Provide technical and thought leadership within SOC by teaching other SOC Analysts about both traditional and unconventional ways to detect, analyze, and mitigate security incidents.
  • ● Act as Subject Matter Expert (SME) trainer for analyst functions, providing support on more involved cases and guiding the activity of other T1/T2 analysts through collaboration.
  • ● Act as the lead coordinator for the Incident Response function and as designated lead on customer on-boarding projects to ensure a successful transition to SOC for security monitoring services.
  • ● Highly technical with at least 3 to 5 years of relevant experience as an analyst in Cyber, IT Security or a SOC
  • ● Any industry relevant(s) certifications such as CISSP, CISM, SANS, CISA, CompTIA Security+ or CompTIA CySA+, GIAC is required.
  • ● Hands-on experience with Microsoft Sentinel or other SIEM and SOAR technologies, creating and running queries, and performing analytics examination of logs and console events.
  • ● Hands-on experience with Microsoft Defender Endpoint, CSPM/CWP or any similar vendor technologies, ability to understand vulnerabilities with insights from industry-leading security research and provide recommendation to external clients
  • ● Experience with Malware Analysis and reverse engineering through static or dynamic analysis.
  • ● Experience and demonstrated success in business development activities, including research and analysis, processes development/improvement, proposal writing etc.
  • ● Experience evaluating the design and operating effectiveness of various control frameworks and standards, including understanding process level risks, technology risks, assessing the adequacy of mitigating controls and providing opportunities for enhancement
  • ● Experience in enterprise asset lifecycle management, with a strong understanding of relating security operations such as patch management, vulnerability management, security architecture, and endpoint management
  • ● Experience and/or strong understanding of cloud transformation, cloud architecture, and cloud security operations.
  • ● Experience leading and/or managing complex projects
  • ● Effectively communicate and present strategies, solutions, insights, and reports to a mix of stakeholders at various levels
  • ● Experience in a leadership role, providing engaged mentorship and knowledge sharing to the team and junior/intermediate level analysts