Senior Consultant - Digital Trust (Cyber Defense)

Role Overview

Senior Consultant - Digital Trust (Cyber Defense) at KPMG. This is a remote position for candidates based in Egypt, with occasional on-site travel to UAE/KSA on a need basis.

Role Purpose

You will deliver red team operations, penetration testing, adversarial emulations, and SOC maturity assessment projects for clients across various sectors. You will combine hands-on offensive security execution with business development support and client relationship management.

Key Responsibilities

Offensive Security Delivery

• Execute penetration tests of web applications, mobile applications, APIs, and network infrastructure.
• Participate in red team and social engineering engagements, including phishing and physical intrusion scenarios under supervision or defined playbooks.
• Set up, maintain, and operate command-and-control (C2) infrastructure using tools such as Cobalt Strike, Sliver, or similar frameworks.
• Assist in adversary emulation exercises based on frameworks like MITRE ATT&CK.
• Conduct secure source code reviews in languages such as JavaScript (Node.js), C#, Python, Swift, Java, Dart, and SQL.
• Conduct secure configuration reviews of network and application infrastructure components in line with industry leading benchmarks such as CIS and STIG.

Reporting & Communication

• Prepare detailed, risk-based reports and present technical findings to internal and client teams.
• Develop constructive client relationships, both inside and outside of KPMG.
• Interact with senior stakeholders in client organizations.

Technical Development & Continuous Improvement

• Develop and maintain internal tools, scripts, and documentation for offensive testing.
• Stay up to date with the latest offensive security techniques, vulnerabilities, and tools.
• Collaborate with other teams including blue and purple teams to improve client defenses.

Business Development & Relationship Management

• Develop an understanding of KPMG's broader offerings to enable identification of business opportunities.
• Support business development activities including proposal development, effort estimation, and budgeting.
• Build out and maintain a professional network.
• Be a trusted advisor and a role model for quality and risk management practices.
• Uphold KPMG's values by acting with integrity.

Qualifications & Experience

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 5+ years of experience in cyber security, with a focus on offensive security and vulnerability assessment and penetration testing (VAPT).
• Experience delivering cyber security services in a consulting environment; prior experience with a Big Four firm is a plus.
• Strong understanding and experience with common penetration testing methodologies such as OWASP, PTES, and NIST.
• Practical experience performing web, mobile, API, LLM, cloud, and network-based VAPT assessments.
• Practical experience with red teaming and purple teaming concepts, such as social engineering, initial access, lateral movement, data exfiltration, and security tooling.
• Experience setting up, using, and maintaining C2 platforms such as Cobalt Strike and Mythic.

Skills & Competencies

Certifications

• OSCP certification is mandatory.
• Must hold at least one of the following: OSEP, OSWE, CCT INF, or CCT APP.

Technical Proficiencies

• Proficiency with industry-standard tools such as Burp Suite, Nmap, Metasploit, and BloodHound.
• Proficient in at least one scripting language such as Python, PowerShell, or Bash.
• Proficient in at least one programming language such as Java, C#, or JavaScript.

Soft Skills

• Strong problem-solving skills and attention to detail in execution and reporting.
• Team-oriented attitude with a willingness to learn and contribute to project success.
• Ability to work in fast-paced environments and meet deadlines.
• Proven ability to deliver work at sustained levels of high intensity and inspire drive and resilience in others.
• Proven ability to analyze problems, identify core issues, and recommend appropriate solutions.
• Excellent presentation and communication skills, both written and oral.
• Commitment to continuous learning and professional development in offensive and defensive security.