KPMG In Malaysia - Advisory - TRC - Experienced Hires - Cyber Defense & Incident Response

About KPMG in Malaysia’s Cyber Defense & Incident Response

KPMG Malaysia’s Cyber Defense & Incident Response team operates within our Technology Risk & Cybersecurity practice under Technology Consulting. Cybersecurity is a strategic growth priority for the firm as organisations face a rapidly evolving, increasingly sophisticated threat landscape.

Our Cyber Defense & Incident Response professionals help organisations detect, respond to and recover from cyber threats by strengthening security operations, vulnerability management, offensive security capabilities and threat intelligence. We combine advanced technical expertise with industry‑aligned frameworks to help clients build resilient, future‑ready security programmes.

Why This Opportunity Stands Out?

Senior Associate

• Hands‑on role in vulnerability management, security testing and cyber defense operations
• Exposure to enterprise‑grade tools and real‑world threat scenarios
• Opportunity to build strong technical depth under experienced cyber leaders
• Clear development pathway towards cyber leadership roles

Manager

• Senior delivery role with hands‑on involvement in defensive and offensive security engagements
• Opportunity to work across vulnerability management, threat detection and incident response
• Exposure to advanced security tooling and emerging technologies, including AI‑driven detection
• Platform to grow leadership capability and contribute to service innovation

Associate Director

• Strategic leadership role driving the Cyber Defense & Incident Response service line
• High visibility with senior client leadership and internal stakeholders
• Opportunity to shape next‑generation Cyber Defense and offensive security offerings
• Strong influence on methodology development, thought leadership and talent mentoring

What Can You Expect?

Senior Associate

• Hands‑on participation in cyber defense and offensive security engagements
• Exposure to regulated and threat‑driven environments
• Continuous learning in vulnerability assessment, penetration testing and attack simulation
• Close collaboration with Managers, Associate Directors and SOC teams

Manager

• Hands‑on leadership of cyber defense engagements across multiple clients
• Close collaboration with governance, risk and compliance teams
• Exposure to complex regulatory and threat‑driven environments
• Continuous learning in advanced threat detection and attack simulation techniques

Associate Director

• Ownership of Cyber Defense capability delivery, growth and quality
• Trusted advisor role to clients’ CISOs, CIOs and senior risk leaders
• Leadership of cross‑team collaboration across SOC, GRC and offensive security
• Involvement in high‑impact proposals, strategic pursuits and industry engagements

How Will You Make Your Mark?

Senior Associate

• Perform vulnerability assessments using tools such as Qualys, Nessus and Rapid7
• Support penetration testing and offensive security activities under supervision
• Assist in security monitoring, threat analysis and incident response activities
• Document findings, risks and remediation recommendations
• Support delivery of regulatory‑aligned cybersecurity engagements

Manager

• Lead deployment and operation of security technologies such as SIEM, IDS/IPS and EDR
• Plan, implement and operate cybersecurity processes, controls and detection capabilities
• Deliver vulnerability assessments, penetration testing and remediation tracking engagements
• Execute offensive security activities including red team exercises and adversary simulations
• Produce actionable remediation plans and prioritised security roadmaps
• Support proposal development, solution design and technical presentations

Associate Director

• Lead and mature Cyber Defense and Offensive Security service offerings
• Define methodologies, standards and policies for vulnerability and penetration testing
• Develop next‑generation threat detection using AI, machine learning and advanced analytics
• Perform and oversee malware reverse engineering and advanced threat intelligence
• Represent KPMG in thought leadership, client forums, training and industry events
• Manage high‑risk, complex engagements and ensure delivery excellence
• Mentor teams and drive Cyber Defense capability building

Who We’re Looking For?

Shared Requirements (Senior Associate, Manager & Associate Director)

Education & Experience

• Bachelor’s degree in Engineering or equivalent technical qualification
• Experience range:
• Senior Associate: 3–6 years
• Manager: 8–10 years
• Associate Director: 10+ years
• Experience in Cyber Defense, Offensive Security or broader Cybersecurity roles
• Strong communication, stakeholder engagement and project management skills
• Ability to perform in fast‑paced, results‑driven environments
• Willingness to travel where required

Regulatory & Framework Knowledge

Strong understanding of:

• BNM RMiT (June 2023)
• NIST Cybersecurity Framework
• ISO 27001:2022
• Securities Commission Malaysia GTRM

Technical Expertise

Hands‑on experience with vulnerability management and offensive security tools such as:

• Qualys, Nessus, Rapid7
• NetSparker / Acunetix, ZAP
• Veracode, Kali Linux, Burp Suite, Nikto
• Experience with SOC environments and threat detection architectures
• Strong understanding of attack vectors, malware, TTPs and adversary behaviour

Professional Certifications (Role‑Dependent)

• OSCP, OSWP
• CREST, CEH
• CHFI, CCMRE
• CISSP, CISM, GIAC or equivalent

Leadership Attributes

Senior Associate

• Strong technical foundation with a desire to deepen cyber specialization
• High attention to quality, documentation and learning

Manager

• Strong technical leadership with developing people‑management capability
• Ability to earn trust through delivery quality and technical credibility

Associate Director

• Proven success advising senior executives and leading security teams
• Strong people leadership, mentoring and service‑line ownership mindset

What to Expect in the Selection Journey?

• A Friendly Pre-Screening Call – We want you to feel empowered and informed throughout the process
• Interview Stage – Our recruitment team will reach out for an initial chat — nothing intimidating, just a conversation to get to know you better. If shortlisted, you’ll be invited for an interview in one of the following formats: Virtual interview or Interview at the KPMG In Malaysia Office

Make it Count, Make the Difference.

Submit your application to KPMG In Malaysia’s Cyber Defense & Incident Response – Experienced Hires role today — your journey starts here.

#LI-SB1