Penetration Tester (Middle)

Location: Onsite or hybrid in Astana or Almaty, Kazakhstan

Company

KPMG's Cybersecurity team supports clients across industries, including financial services and the public sector, with information security and vulnerability management.

What you will do

• Conduct penetration tests to identify vulnerabilities and assess the effectiveness of client security controls.
• Perform technical infrastructure security assessments, including host-based log and network analysis.
• Analyze security testing results and develop recommendations for vulnerability remediation.
• Support the preparation of clear and comprehensive security assessment reports.
• Participate in cybersecurity projects and collaborate with team members to improve client information security posture.

Requirements

• Bachelor's or Master's degree in Information Technology, Cybersecurity, or a related field.
• At least 1 year of relevant experience in penetration testing, application security, cybersecurity consulting, or a related area.
• Knowledge of Windows, Unix/Linux, TCP/IP, IDS/IPS, and web content filtering technologies.
• Fluent written and spoken English.

Nice to have

• Understanding of IT General Controls and cybersecurity frameworks such as NIST Cybersecurity Framework and ISO 27001.
• Experience with an object-oriented programming language, such as Python, Ruby, or Java.
• Hands-on experience with Hack The Box, TryHackMe, or PortSwigger.
• Participation in Capture The Flag competitions or relevant certifications such as OSCP or CPTS.

Culture & Benefits

• Full-time employment with onsite or hybrid work arrangements.
• Collaboration within a cybersecurity team on client-focused projects.
• Exposure to clients across financial services, the public sector, and other industries.