Consulting, Cyber Defence, Graduate Associate 2026

About KPMG

At KPMG, your long-term future is as important to us as it is to you. We strive to provide experiences that foster development, mobility, and a culture of diversity and inclusion. Our innovative approach aims to inspire how we work and how we think, with a commitment to continuous improvement.

Role

KPMG Cybersecurity professionals assist clients in addressing concerns around confidentiality, integrity, availability, and privacy of technology, business systems, and information assets. Using a holistic view of how technology and business integrate, the Cyber team conducts technology-risk assessments, technology compliance reviews, IT/operational process reviews, and designs information risk and cybersecurity solutions.

Team & Focus

We are building a growing team to support clients in the following area: KPMG Cyber Defence provides comprehensive security solutions including vulnerability assessment, application and network penetration testing, wireless and mobile security, cloud security evaluation, and system security testing. Our mission is to identify blind spots in defences and offer in-depth assessments of previously overlooked weaknesses. We specialize in red teaming to simulate real-world attacks and purple teaming to enhance collaboration between offensive and defensive security teams.

Responsibilities

• Conduct comprehensive vulnerability assessments and penetration tests across diverse platforms, including web and mobile applications, networks, wireless systems, and cloud environments.
• Engage in purple and red teaming exercises to rigorously test client defences and provide actionable insights into security posture enhancements.
• Develop detailed technical reports outlining findings, vulnerabilities, and recommended mitigations.
• Present findings and technical recommendations to senior management and clients in a clear and concise manner.
• Continually research and stay up to date with the latest cybersecurity trends, tools, and techniques.

Qualifications & Requirements

The ideal candidate should possess

• Degree in Cybersecurity / Information Security; OR
• Degree in Engineering with relevant skills/experience or aptitude to further development in cybersecurity; OR
• Degree in Computer Science / IT with relevant skills/experience or aptitude to further development in cybersecurity.
• Familiarity with multiple operating systems (Windows, Linux, macOS) and related security mechanisms.
• Familiarity with scripting and programming languages such as Python, JavaScript, Bash, or PowerShell.
• Understanding of web protocols (HTTP, HTTPS, SSL/TLS) and securing web applications; knowledge of OWASP Top Ten vulnerabilities.
• Exposure to cloud environments (AWS, Azure, Google Cloud) and basic cloud security practices.
• Basic proficiency with penetration testing tools (Nmap, Metasploit, Burp Suite, Wireshark) and familiarity with Kali Linux.
• Understanding of large language models (LLMs) and their applications in cybersecurity.
• Certifications such as OSCP, CREST CRT, CPTS, CPT/BH-CWB/CWES are highly desirable; candidates planning to pursue these certifications are encouraged to apply.
• Strong analytical and problem-solving abilities.
• Excellent communication skills to relay complex technical information clearly.
• Eagerness to learn and adapt to new technologies and methodologies.
• Proactive approach to identifying and addressing security challenges.
• Keen interest in staying up-to-date on cybersecurity trends and threats.