Technical Cybersecurity Specialist (Middle Pentester)

Location: Hybrid and onsite in Almaty or Astana, Kazakhstan

Company

KPMG's Cybersecurity team supports clients in identifying vulnerabilities, assessing security posture, and improving information security.

What you will do

• Conduct penetration tests to identify vulnerabilities and assess the effectiveness of client security controls.
• Perform technical infrastructure assessments, including host-based log analysis and network analysis to identify potential compromises.
• Analyze testing results and recommend remediation for identified vulnerabilities.
• Support the preparation of clear and comprehensive security assessment reports.
• Participate in cybersecurity projects, collaborate with colleagues, and contribute to improving clients' information security posture.

Requirements

• Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
• At least 1 year of relevant experience in penetration testing, application security, cybersecurity consulting, or related areas.
• Knowledge of Windows, Unix/Linux, TCP/IP, IDS/IPS, and web content filtering technologies.
• Fluent written and spoken English.

Nice to have

• Understanding of IT General Controls and cybersecurity frameworks, including NIST Cybersecurity Framework and ISO 27001.
• Experience with at least one object-oriented programming language, such as Python, Ruby, or Java.
• Hands-on experience with Hack The Box, TryHackMe, or PortSwigger.
• Participation in Capture The Flag competitions.
• Relevant certifications such as OSCP or CPTS.

Culture & Benefits

• Full-time work in a hybrid and onsite format.
• Work with clients across financial services, the public sector, and other industries.
• Participation in cybersecurity consulting projects focused on security posture improvement.