Skip to main content

      Location: Bangkok, Thailand

      Rank: Associate

      Job description



      About us

      Join KPMG, a leading global consulting firm committed to driving innovation and digital transformation for businesses worldwide. Our team partners with top enterprises to deliver cutting-edge solutions in Digital Transformation (DX), ERP implementation, and Cybersecurity. We foster a collaborative, growth-oriented environment where your expertise makes a real impact.

      Roles and responsibilities

      • Focus on Cyber Security/Network/Web-Mobile Application/IT Security Framework
      • Communicating vulnerabilities to Technology stakeholders and assisting them with remediation activities
      • Tracking, assisting and managing to resolution the closure of security risks including review plans and monitor progress or remedial actions.
      • Analyzing the results of the security testing conducted and assisting stakeholders with identifying viable remediation solutions for any vulnerability identified
      • Delivery of technical Security Testing (includes Penetration Testing) and Security Assessments
      • Establish appropriate metrics in order to have a solid understanding of the operational issues and provide more value reporting to the stakeholders
      • Provide an in-depth review of an organization’s ability to protect its information assets and its preparedness against cyber threats
      • Provide a review of an organization’s ability to respond to cyber security incidents
      • Proactive assessment of review of an organization’s technical infrastructure including host-based log analysis, and/or network analysis to determine if any unidentified compromise has occurred previously
      • Support client in an identification, creation and execution of an IR program after a cyber incident has occurred

      Qualifications and Skills

      • Bachelor's degree in Computer Engieering with background in cybersecurity, network, web-mobile application and coding.
      • 1-2 years of relevant experiences with the role.
      • Passionate about cybersecurity and ethical hacking, with a strong willingness to learn new technologies, attack techniques, and security trends.
      • Basic understanding of network infrastructure, operating systems, web applications, mobile applications, and cloud environments.
      • Knowledge of common security concepts, vulnerabilities, and attack methodologies (e.g., OWASP Top 10, MITRE ATT&CK, CVSS).
      • Familiarity with programming or scripting languages such as Python, PowerShell, Bash, JavaScript, or similar.
      • Hands-on experience or academic exposure to penetration testing tools such as Burp Suite, Metasploit, Nmap, SQLMap, Wireshark, Kali Linux, and related security tools.
      • Experience participating in Capture The Flag (CTF), cybersecurity competitions, research projects, bug bounty programs, or cybersecurity communities is an advantage.
      • Understanding of security testing methodologies and industry standards (e.g., PTES, OWASP Testing Guide, NIST).
      • Strong analytical and problem-solving skills with attention to detail.
      • Good communication and interpersonal skills, with the ability to explain technical findings to both technical and non-technical audiences.
      • Good report writing and documentation skills in both Thai and English.
      • Ability to work effectively in a team environment and manage multiple assignments under supervision.
      • Relevant cybersecurity certifications (e.g., eJPT, Security+, PNPT, CEH, CPTS, or equivalent) are a plus.
      Apply now

      #LI-JL1