We’re looking for a Senior Security Operations Analyst to join our Technology team and play a key role in protecting our environment from evolving cyber threats.
This is a hands-on role with a strong focus on vulnerability management, working across technology and application teams to identify security weaknesses, understand the real-world risk they present, and drive remediation through to completion.
You’ll work with security platforms including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk, using data and threat context to ensure we focus our efforts where they matter most.
Day to day you will:
- Own day-to-day vulnerability management, from identification and assessment through to remediation.
- Analyse and correlate findings across tools including Qualys, Microsoft Defender, GitHub Advanced Security and Snyk.
- Prioritise vulnerabilities based on severity, exploitability, internet exposure, attack paths and business criticality.
- Partner with infrastructure, application and platform teams to establish clear remediation ownership and timeframes.
- Create and manage remediation tickets, track progress and follow up on overdue or high-risk vulnerabilities.
- Monitor remediation against agreed vulnerability SLAs and escalate exceptions or emerging risks.
- Help maintain accurate asset ownership and criticality information to enable effective, risk-based prioritisation.
- Produce meaningful reporting across security exposure, remediation performance, vulnerability ageing, backlog and emerging trends.
- Support security governance, audit and risk activities by providing clear evidence, metrics and remediation updates.
- Look for opportunities to improve vulnerability management processes through automation and smarter ways of working.
- Contribute across the wider Security Operations function, including vulnerability triage, threat-driven investigations and security incident support.
About you:
- Similar experience in cyber security, vulnerability management, Security Operations or a related technology security role.
- Hands-on experience with vulnerability scanning, SIEM, XDR or EDR security tools.
- Strong analytical skills with an understanding of vulnerability risk, exploitability, attack paths and prioritisation.
- Exposure to tools such as Microsoft Defender XDR, Microsoft Sentinel and/or frameworks such as MITRE ATT&CK.
- Strong communication and stakeholder skills, with the ability to turn security findings into clear actions and drive remediation through to completion.
- Experience with PowerShell, Python or security automation would be an advantage.
- Relevant certifications such as Security+, CySA+, SC-200 or CISSP would be beneficial.
$115,000- $125,000 The salary banding provided serves as an indication of the market rate for this role. The salary offer will be determined based on the candidate's skills, experience, expertise, qualifications and relativities.
Recruitment Agencies: The recruitment for this role is being managed directly by the KPMG Talent Acquisition team. We will contact our preferred agency partners if we require agency assistance. Thank you for your understanding.
Life at KPMG
KPMG values diversity in the workforce and we encourage candidates from diverse backgrounds to apply for roles, including individuals with a disability, additional mental health needs, chronic health conditions or who identify as neurodivergent.
For disabled and neurodiverse candidates, if you encounter accessibility barriers or if you have access needs and require support to participate equitably in the recruitment process, please email Emma at
KPMGAccessibilityNetwork@kpmg.co.nz.
For any general questions about the role or recruitment process, feel free to reach out to our Talent Acquisition team at
Jobs@kpmg.co.nz.
We offer rewarding careers to talented individuals and a holistic range of benefits to support your life balance, whatever your circumstance. We want you to do Work That Matters, Thrive and Grow and know that you Belong here with us, at KPMG.
As a KPMG employee, we will offer you:
— Access to the firm's annual incentive scheme
— Opportunities for local and international secondments
— Hybrid working across a mix of office, client and home hubs to recognise that people have individual circumstances and preferences when it comes to where and how they work
— The ability to work from overseas and extend time connecting with friends and family outside New Zealand
— Flexible leave options, including the ability to purchase additional annual leave
— Gender-neutral support for all stages of the parental journey, including access to 18 weeks of fully paid parental leave for all new parents
— A paid professional association membership of your choice
— Digital accreditations through our partnership with Microsoft, LinkedIn Learning, with bespoke learning pathways for all employees
— A wide-range of special offers and discounts on insurances, banking services, and lifestyle goods and services
— The support, allyship and opportunity to join our many Inclusion, Diversity and Equity Affinity networks, including the Kiwa, Pride, Ethnicity, Accessibility and Wahine groups
— The opportunity to participate in Green Team activities, as we work toward reducing the firm’s environmental footprint and become carbon zero by 2030
— An invitation to join your local Social club and enjoy events aimed at bringing people together for social, sporting, cultural, family and fundraising activities
— Paid time off for volunteering and involvement in citizenship activities
— An array of health and wellness benefits such as free flu vaccinations, subsidised sporting events, free confidential counselling services, additional 5 days of Wellbeing leave to support you and your family's overall health and wellness, access to our Wellbeing portal with an extensive range of advice and resources and much much more!
We believe that diversity of background and experience strengthens relationships and delivers meaningful benefits to our people, clients and communities. Our goal is to be recognised as an employer of choice for all, irrespective of gender, ethnicity, generation, flexible work status, family circumstances, sexual orientation or disability. Further info can be found on our website.
