Red Team Cyber Security, Associate/ Senior Associate

About KPMG Singapore

KPMG in Singapore is part of a worldwide network of independent professional services firms serving clients in Audit, Tax, and Advisory. The organization spans 138 countries and territories and employs more than 276,000 partners and staff across member firms. Each KPMG member firm is a separate legal entity. KPMG International Limited is a private company limited by guarantee in England, and neither it nor its related entities provide services to clients.

Why Join

KPMG places strong value on long-term career growth, offering experiences designed to build a lasting professional journey. Team members can access training and development, cross-functional exposure, mobility opportunities, and corporate responsibility volunteering. The firm describes its culture as one that values commitment, encourages fresh thinking, and supports diversity and inclusion, with a strong drive to keep improving.

Role Overview

The cybersecurity team helps clients protect the confidentiality, integrity, and availability of their systems and information. Working with a business-aware and technology-focused lens, the team carries out technology risk assessments, compliance reviews, IT and operational process reviews, and the design of information risk and cyber security solutions.

Team members frequently engage with senior client stakeholders, including CEOs, CISOs, CIOs, COOs, CROs, and their direct reports. For this reason, the role calls for a client-focused mindset, the ability to understand IT in a business setting, and strong communication skills.

Key Responsibilities

• Work through complex technical problems and create practical, innovative solutions for prominent clients across local and international assignments.
• Contribute to business growth efforts by supporting proposals, sales activities, and client presentations.
• Guide, coach, and support team members as part of the performance management process or on specific client engagements.
• Plan and execute red teaming engagements using intelligence-led methods, including building and implementing TTPs based on threat actor profiles and relevant frameworks.
• Manage multiple cybersecurity testing assignments across different disciplines in a coordinated and independent manner.
• Oversee project delivery elements such as requirements, schedules, documentation, and risk management throughout the project lifecycle.

Candidate Profile

The ideal candidate should have at least 2 years of consulting experience in red teaming or penetration testing. Professional certifications such as OSCP, CREST CRT, CPTS, CBBH, or CWES are strongly preferred.

You should show a genuine passion for cybersecurity, especially technical assessments and reviews, and have hands-on exposure to security testing areas such as red teaming, threat intelligence, and vulnerability assessment or penetration testing across web, network, mobile, cloud, and thick client environments.

The role also expects familiarity with cloud environments such as AWS, Azure, or Google Cloud, along with a solid grasp of cloud security best practices. Understanding of large language models and how they can be applied in cybersecurity is also valued.

Strong understanding of IT risks and their business impact is important, along with the ability to communicate clearly and effectively with senior stakeholders, direct reports, and internal team members.

You should be self-motivated, eager to learn new technologies and services, and willing to share knowledge with the wider team.

Additional Information

Only shortlisted candidates will be contacted by KPMG’s Talent Acquisition team. Any personal data collected will be used strictly for recruitment purposes.

Equal Opportunity and Workplace Culture

KPMG Singapore is committed to building a diverse and inclusive workplace. The company values different perspectives, backgrounds, and experiences, and considers them a strength in serving people, clients, and communities. All qualified applicants are considered without discrimination based on age, race, gender identity or expression, colour, marital status, religion, sexual orientation, disability, or other non-merit factors.

The organization also supports staff growth through Take Charge: Flexi-work, its flexible working framework designed to help agile, innovative teams deliver business objectives.