Red Team Cyber Security Associate/Senior Associate

About KPMG Singapore

KPMG Singapore is part of a global network of independent firms offering Audit, Tax, and Advisory services across 138 countries with over 276,000 professionals. Each firm operates as a legally separate entity. KPMG values a culture that rewards hard work, embraces inclusive and diverse perspectives, encourages innovation, and supports employee development through training, cross-functional experiences, mobility, and volunteering.

Role Overview

Candidates in this role will help clients safeguard their technology and information assets by focusing on Confidentiality, Integrity, and Availability. The Cybersecurity team conducts risk assessments, compliance reviews, process audits, and cyber risk solution design across business and technology domains. Frequent interaction with senior leadership stakeholders such as CEOs, CISOs, CIOs, COOs, and CROs requires strong communication skills and a client-oriented mindset.

Key Responsibilities

• Identify complex vulnerabilities and provide innovative solutions for high-profile engagements locally and internationally.
• Support business development activities, including proposal preparation and client presentations.
• Mentor and develop junior team members as part of performance management and specific projects.

Candidate Profile

• At least 2 years of consultancy experience in Red Teaming or Penetration Testing.
• Industry certifications such as OSCP, CRT, CPTS, and CBBH/CWES are highly preferred.
• Demonstrated passion and expertise in technical cybersecurity assessments and reviews.
• Hands-on experience with red teaming, threat intelligence, and vulnerability testing for web, network, mobile, cloud, and client applications.
• Exposure to leading cloud platforms (AWS, Azure, Google Cloud) and understanding of cloud security principles.
• Knowledge of large language models and their relevance to cybersecurity.
• Capability to lead and execute comprehensive intel-driven red team exercises that align with industry standards and threat actor profiling.
• Ability to independently manage multiple cybersecurity projects integrating various security testing disciplines.
• Strong project management skills including meeting requirements, deadlines, documentation, and risk oversight.
• Solid grasp of IT risk management and its impact in a business context.
• Excellent communication skills to liaise effectively with executive clients and team members.
• Highly self-motivated with eagerness to learn emerging technologies and share knowledge within the team.

Additional Information

Only shortlisted applicants will be contacted by KPMG's Talent Acquisition team. Personal data collected will be used exclusively for recruitment purposes.

KPMG Singapore is dedicated to fostering a diverse and inclusive environment. We are an equal opportunity employer and consider applicants regardless of age, race, gender identity, color, marital status, religion, sexual orientation, disability, or other non-merit factors. Our flexible working policy, Take Charge: Flexi-work, supports agile teams and individual growth.