Cybersecurity - Penetration Tester (Associate)

Location: Bangkok, Thailand

Rank: Associate

Job Description

About us

Join KPMG, a leading global consulting firm committed to driving innovation and digital transformation for businesses worldwide. Our team partners with top enterprises to deliver cutting-edge solutions in Digital Transformation (DX), ERP implementation, and Cybersecurity. We foster a collaborative, growth-oriented environment where your expertise makes a real impact.

Roles and responsibilities

• Focus on Cyber Security/Network/Web-Mobile Application/IT Security Framework
• Communicating vulnerabilities to Technology stakeholders and assisting them with remediation activities
• Tracking, assisting and managing to resolution the closure of security risks including review plans and monitor progress or remedial actions.
• Analyzing the results of the security testing conducted and assisting stakeholders with identifying viable remediation solutions for any vulnerability identified
• Delivery of technical Security Testing (includes Penetration Testing) and Security Assessments
• Establish appropriate metrics in order to have a solid understanding of the operational issues and provide more value reporting to the stakeholders
• Provide an in-depth review of an organization's ability to protect its information assets and its preparedness against cyber threats
• Provide a review of an organization's ability to respond to cyber security incidents
• Proactive assessment of review of an organization's technical infrastructure including host-based log analysis, and/or network analysis to determine if any unidentified compromise has occurred previously
• Support client in an identification, creation and execution of an IR program after a cyber incident has occurred
  
  

Qualifications And Skills

• Bachelor's degree in Computer Engieering with background in cybersecurity, network, web-mobile application and coding.
• 1-2 years of relevant experiences with the role.
• Passionate about cybersecurity and ethical hacking, with a strong willingness to learn new technologies, attack techniques, and security trends.
• Basic understanding of network infrastructure, operating systems, web applications, mobile applications, and cloud environments.
• Knowledge of common security concepts, vulnerabilities, and attack methodologies (e.g., OWASP Top 10, MITRE ATT&CK, CVSS).
• Familiarity with programming or scripting languages such as Python, PowerShell, Bash, JavaScript, or similar.
• Hands-on experience or academic exposure to penetration testing tools such as Burp Suite, Metasploit, Nmap, SQLMap, Wireshark, Kali Linux, and related security tools.
• Experience participating in Capture The Flag (CTF), cybersecurity competitions, research projects, bug bounty programs, or cybersecurity communities is an advantage.
• Understanding of security testing methodologies and industry standards (e.g., PTES, OWASP Testing Guide, NIST).
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and interpersonal skills, with the ability to explain technical findings to both technical and non-technical audiences.
• Good report writing and documentation skills in both Thai and English.
• Ability to work effectively in a team environment and manage multiple assignments under supervision.
• Relevant cybersecurity certifications (e.g., eJPT, Security+, PNPT, CEH, CPTS, or equivalent) are a plus.
  
  

Apply now