About KPMG in Malaysia's Cyber Defense & Incident Response

KPMG Malaysia's Cyber Defense & Incident Response team operates within our Technology Risk & Cybersecurity practice under Technology Consulting. Cybersecurity is a strategic growth priority for the firm as organisations face a rapidly evolving, increasingly sophisticated threat landscape.

Our Cyber Defense & Incident Response professionals help organisations detect, respond to and recover from cyber threats by strengthening security operations, vulnerability management, offensive security capabilities and threat intelligence. We combine advanced technical expertise with industry‑aligned frameworks to help clients build resilient, future‑ready security programmes.

Why This Opportunity Stands Out

Senior Associate

Hands‑on role in vulnerability management, security testing and cyber defense operations
Exposure to enterprise‑grade tools and real‑world threat scenarios
Opportunity to build strong technical depth under experienced cyber leaders
Clear development pathway towards cyber leadership roles

Manager

Senior delivery role with hands‑on involvement in defensive and offensive security engagements
Opportunity to work across vulnerability management, threat detection and incident response
Exposure to advanced security tooling and emerging technologies, including AI‑driven detection
Platform to grow leadership capability and contribute to service innovation

Associate Director

Strategic leadership role driving the Cyber Defense & Incident Response service line
High visibility with senior client leadership and internal stakeholders
Opportunity to shape next‑generation Cyber Defense and offensive security offerings
Strong influence on methodology development, thought leadership and talent mentoring

What Can You Expect

Senior Associate

Hands‑on participation in cyber defense and offensive security engagements
Exposure to regulated and threat‑driven environments
Continuous learning in vulnerability assessment, penetration testing and attack simulation
Close collaboration with Managers, Associate Directors and SOC teams

Manager

Hands‑on leadership of cyber defense engagements across multiple clients
Close collaboration with governance, risk and compliance teams
Exposure to complex regulatory and threat‑driven environments
Continuous learning in advanced threat detection and attack simulation techniques

Associate Director

Ownership of Cyber Defense capability delivery, growth and quality
Trusted advisor role to clients CISOs, CIOs and senior risk leaders
Leadership of cross‑team collaboration across SOC, GRC and offensive security
Involvement in high‑impact proposals, strategic pursuits and industry engagements

How Will You Make Your Mark

Senior Associate

Perform vulnerability assessments using tools such as Qualys, Nessus and Rapid7
Support penetration testing and offensive security activities under supervision
Assist in security monitoring, threat analysis and incident response activities
Document findings, risks and remediation recommendations
Support delivery of regulatory‑aligned cybersecurity engagements

Manager

Lead deployment and operation of security technologies such as SIEM, IDS/IPS and EDR
Plan, implement and operate cybersecurity processes, controls and detection capabilities
Deliver vulnerability assessments, penetration testing and remediation tracking engagements
Execute offensive security activities including red team exercises and adversary simulations
Produce actionable remediation plans and prioritised security roadmaps
Support proposal development, solution design and technical presentations

Associate Director

Lead and mature Cyber Defense and Offensive Security service offerings
Define methodologies, standards and policies for vulnerability and penetration testing
Develop next‑generation threat detection using AI, machine learning and advanced analytics
Perform and oversee malware reverse engineering and advanced threat intelligence
Represent KPMG in thought leadership, client forums, training and industry events
Manage high‑risk, complex engagements and ensure delivery excellence
Mentor teams and drive Cyber Defense capability building

Who We're Looking For

Shared Requirements (Senior Associate, Manager & Associate Director)

Education & Experience

Bachelor's degree in Engineering or equivalent technical qualification
Experience range:
Senior Associate: 3–6 years
Manager: 8–10 years
Associate Director: 10+ years
Experience in Cyber Defense, Offensive Security or broader Cybersecurity roles
Strong communication, stakeholder engagement and project management skills
Ability to perform in fast‑paced, results‑driven environments
Willingness to travel where required

Regulatory & Framework Knowledge

Strong understanding of:

BNM RMiT (June 2023)
NIST Cybersecurity Framework
ISO 27001:2022
Securities Commission Malaysia GTRM

Technical Expertise

Hands‑on experience with vulnerability management and offensive security tools such as:

Qualys, Nessus, Rapid7
NetSparker / Acunetix, ZAP
Veracode, Kali Linux, Burp Suite, Nikto
Experience with SOC environments and threat detection architectures
Strong understanding of attack vectors, malware, TTPs and adversary behaviour

Professional Certifications (Role‑Dependent)

OSCP, OSWP
CREST, CEH
CHFI, CCMRE
CISSP, CISM, GIAC or equivalent

Leadership Attributes

Senior Associate

Strong technical foundation with a desire to deepen cyber specialization
High attention to quality, documentation and learning

Manager

Strong technical leadership with developing people‑management capability
Ability to earn trust through delivery quality and technical credibility

Associate Director

Proven success advising senior executives and leading security teams
Strong people leadership, mentoring and service‑line ownership mindset

What to Expect in the Selection Journey

A Friendly Pre-Screening Call – We want you to feel empowered and informed throughout the process
Interview Stage – Our recruitment team will reach out for an initial chat — nothing intimidating, just a conversation to get to know you better. If shortlisted, you'll be invited for an interview in one of the following formats: Virtual interview or Interview at the KPMG In Malaysia Office

Make it Count, Make the Difference.

Submit your application to KPMG In Malaysia's Cyber Defense & Incident Response – Experienced Hires role today — your journey starts here.

#LI-SB1

KPMG In Malaysia - Advisory - TRC Cyber Defense & Incident Response - Experienced Hires