Location: Bangkok, Thailand

Rank: Associate

Job description

About us

Join KPMG, a leading global consulting firm committed to driving innovation and digital transformation for businesses worldwide. Our team partners with top enterprises to deliver cutting-edge solutions in Digital Transformation (DX), ERP implementation, and Cybersecurity. We foster a collaborative, growth-oriented environment where your expertise makes a real impact.

Roles and responsibilities

• Focus on Cyber Security/Network/Web-Mobile Application/IT Security Framework

• Communicating vulnerabilities to Technology stakeholders and assisting them with remediation activities

• Tracking, assisting and managing to resolution the closure of security risks including review plans and monitor progress or remedial actions.

• Analyzing the results of the security testing conducted and assisting stakeholders with identifying viable remediation solutions for any vulnerability identified

• Delivery of technical Security Testing (includes Penetration Testing) and Security Assessments

• Establish appropriate metrics in order to have a solid understanding of the operational issues and provide more value reporting to the stakeholders

• Provide an in-depth review of an organization's ability to protect its information assets and its preparedness against cyber threats

• Provide a review of an organization's ability to respond to cyber security incidents

• Proactive assessment of review of an organization's technical infrastructure including host-based log analysis, and/or network analysis to determine if any unidentified compromise has occurred previously

• Support client in an identification, creation and execution of an IR program after a cyber incident has occurred

Qualifications and Skills

• Bachelor's degree in Computer Engieering with background in cybersecurity, network, web-mobile application and coding.

• 1-2 years of relevant experiences with the role.

• Passionate about cybersecurity and ethical hacking, with a strong willingness to learn new technologies, attack techniques, and security trends.

• Basic understanding of network infrastructure, operating systems, web applications, mobile applications, and cloud environments.

• Knowledge of common security concepts, vulnerabilities, and attack methodologies (e.g., OWASP Top 10, MITRE ATT&CK, CVSS).

• Familiarity with programming or scripting languages such as Python, PowerShell, Bash, JavaScript, or similar.

• Hands-on experience or academic exposure to penetration testing tools such as Burp Suite, Metasploit, Nmap, SQLMap, Wireshark, Kali Linux, and related security tools.

• Experience participating in Capture The Flag (CTF), cybersecurity competitions, research projects, bug bounty programs, or cybersecurity communities is an advantage.

• Understanding of security testing methodologies and industry standards (e.g., PTES, OWASP Testing Guide, NIST).

• Strong analytical and problem-solving skills with attention to detail.

• Good communication and interpersonal skills, with the ability to explain technical findings to both technical and non-technical audiences.

• Good report writing and documentation skills in both Thai and English.

• Ability to work effectively in a team environment and manage multiple assignments under supervision.

• Relevant cybersecurity certifications (e.g., eJPT, Security+, PNPT, CEH, CPTS, or equivalent) are a plus.