Consultant - Cyber Defense - Offensive Security

Overview

KPMG Canada is a place where diverse perspectives address the country's critical challenges. Join a company that supports your career growth, skill development, and leadership at all stages, allowing you to create impact beyond business.

This role is crucial within the Cyber Defense - Offensive Security team and requires demonstrated expertise in web application security as well as skills in infrastructure vulnerability assessments, penetration testing, red/purple team exercises, and social engineering simulations. You will engage with client projects, thoroughly understanding requirements, conducting both manual and automated penetration testing, preparing detailed reports, and communicating findings to relevant stakeholders.

Responsibilities

• Conduct manual and automated security evaluations of web and mobile applications and network infrastructure, adhering to industry standards and simulating realistic attack scenarios through penetration testing.
• Create and execute test cases that identify and exploit security vulnerabilities.
• Assess the impact, severity, risks, and consequences of security exploits.
• Document findings comprehensively, offering actionable recommendations, and effectively present them to client stakeholders.
• Continuously update knowledge on emerging security vulnerabilities, testing techniques, and industry best practices.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Information Security, or related discipline.
• At least one year of experience in application security testing.
• Proficiency in infrastructure vulnerability assessments, penetration testing, red team activities, and social engineering tactics.
• Familiarity with security testing frameworks such as OWASP, OSSTMM, and PTES.
• Programming capabilities in Python and Java.
• Possession of relevant certifications like OSCP, BSCP, or HTB CPTS.
• Strong communication skills to convey findings clearly to both technical and non-technical audiences.
• Ability to work independently and collaboratively within a dynamic, client-facing environment.
• Consulting or professional services experience in offensive security is an asset.

KPMG values candidates passionate about cybersecurity, encouraging those with hands-on lab experience, participation in capture-the-flag competitions, personal projects, or contributions to open-source security tools.

Compensation and Benefits

The salary ranges from $73500 to $122500 CAD annually, with potential eligibility for performance-based bonuses. Salary is determined based on factors including the candidate's specific location, skills, and qualifications. Additionally, KPMG provides a well-rounded and competitive total rewards package.

Company Values and Culture

KPMG fosters a workplace founded on Integrity, Continuous Improvement, Courage, Respect for Diversity, and Meaningful Contribution. They are committed to equal opportunity employment, cultivating an inclusive, accessible environment where everyone can realize their potential.

Recruitment Process Adjustments

KPMG supports inclusivity by providing necessary accommodations throughout the recruitment process to ensure candidates can perform optimally. Requests for adjustments such as extra interview preparation time or accessible communication tools can be made during any step of hiring by contacting the Employee Relations Service team.

Use of Artificial Intelligence

While KPMG leverages AI tools to enhance recruitment efficiency, all hiring decisions are ultimately made by trained human managers. AI is used to facilitate organization and qualification surfacing but not to replace human judgment, aligning with their Trusted AI framework for privacy and security.