Location
Hybrid and onsite in Almaty or Astana, Kazakhstan
Company
KPMG's Cybersecurity team supports clients in identifying vulnerabilities, assessing security posture, and improving information security.
What you will do
•Conduct penetration tests to identify vulnerabilities and assess the effectiveness of client security controls.
•Perform technical infrastructure assessments, including host-based log analysis and network analysis to identify potential compromises.
•Analyze testing results and recommend remediation for identified vulnerabilities.
•Support the preparation of clear and comprehensive security assessment reports.
•Participate in cybersecurity projects, collaborate with colleagues, and contribute to improving clients' information security posture.
Requirements
•Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
•At least 1 year of relevant experience in penetration testing, application security, cybersecurity consulting, or related areas.
•Knowledge of Windows, Unix/Linux, TCP/IP, IDS/IPS, and web content filtering technologies.
•Fluent written and spoken English.
Nice to have
•Understanding of IT General Controls and cybersecurity frameworks, including NIST Cybersecurity Framework and ISO 27001.
•Experience with at least one object-oriented programming language, such as Python, Ruby, or Java.
•Hands-on experience with Hack The Box, TryHackMe, or PortSwigger.
•Participation in Capture The Flag competitions.
•Relevant certifications such as OSCP or CPTS.
Culture & Benefits
•Full-time work in a hybrid and onsite format.
•Work with clients across financial services, the public sector, and other industries.
•Participation in cybersecurity consulting projects focused on security posture improvement.
