Red Team Cyber Security Associate/Senior Associate

About KPMG Singapore

KPMG Singapore is part of a global network of independent member firms providing Audit, Tax, and Advisory services worldwide. Operating across 138 countries with over 276,000 professionals, KPMG entities are legally independent and separate. The international structure supports diverse career opportunities and robust corporate cultures valuing innovation, diversity, and inclusion.

Role Overview

Our Cybersecurity team at KPMG helps clients safeguard their technology, business systems, and information assets by focusing on confidentiality, integrity, and availability. The team's holistic approach integrates technology and business perspectives to conduct risk assessments, technology compliance reviews, and design information risk management and cyber security solutions. This role engages regularly with high-level executives, including CEOs, CISOs, CIOs, COOs, and CROs, requiring client-centric communication and strong IT-business understanding.

Key Responsibilities

• Resolve complex cybersecurity challenges by devising innovative solutions for prominent clients on both local and global projects.
• Contribute to business development by assisting with sales activities such as proposal writing and client presentations.
• Mentor and develop junior team members through formal performance management processes and specific engagements.

Ideal Candidate Profile

• At least 2 years of consulting experience specializing in Red Teaming or Penetration Testing.
• Holds or is pursuing industry-recognized certifications such as OSCP, CREST Registered Penetration Tester, CPTS, CBBH, or CWES.
• Passionate about cybersecurity with demonstrable interest and expertise in technical assessments.
• Experienced in security testing disciplines including red teaming, threat intelligence, and vulnerability assessments across web, network, mobile, cloud, and thick client environments.
• Familiarity with cloud platforms like AWS, Azure, or Google Cloud and understanding of cloud security best practices.
• Knowledge of large language models (LLMs) and their use in cybersecurity contexts.
• Proven ability to lead red team engagements using intelligence-led planning and execution based on threat actor profiling and industry frameworks.
• Strong project management skills to manage multiple security testing engagements, ensuring compliance with requirements, timelines, documentation, and risk management.
• Deep understanding of IT risks and their business implications.
• Excellent communication skills for interacting effectively with executive clients and team members.
• A proactive learner eager to explore new technologies and share insights within the team.

Diversity and Inclusion

KPMG Singapore is dedicated to fostering a diverse and inclusive workplace that embraces all talents. All eligible candidates are considered regardless of age, race, gender identity or expression, marital status, religion, sexual orientation, disability, or any other non-merit factor. The firm supports flexible working through its Take Charge: Flexi-work framework, promoting agile and innovative teamwork.

Application Notice

Only shortlisted applicants will be contacted. Personal data collected during recruitment will be used solely for hiring purposes.