KPMG - Red Team - Consultant

About

KPMG in India, a professional services firm, is the Indian member firm affiliated with KPMG International and was established in September 1993. Our professionals leverage the global network of firms, providing detailed knowledge of local laws, regulations, markets, and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara, and Vijayawada.

KPMG in India offers services to national and international clients across sectors. We strive to provide rapid, performance-based, industry-focused, and technology-enabled services, reflecting a shared knowledge of global and local industries and our experience of the Indian business environment.

Job Description

Experience: 4+ years with at-least 2-3 years in client facing advisory consulting role and managing a medium sized team

Preferred Certifications: OSCP, OSCE, CEH, CRTP or other offensive security certifications are a plus

• Desired skill set:

1. Experience in Red Teaming, Penetration Testing, or Offensive Security.

2. Plan and execute advanced red team operations, simulating sophisticated adversary attacks to evaluate organizational security controls and response mechanisms.

3. Strong knowledge of common attack methodologies, tactics, techniques, and procedures (TTPs).

4. Proficiency with red team tools and frameworks (e.g., Metasploit, Cobalt Strike, Empire, BloodHound, SharpHound, etc.).

5. Experience with manual and automated penetration testing tools (e.g., Burp Suite, Nessus, Nmap, Nikto).

6. Strong knowledge of networking protocols, operating systems (Linux/Windows), and web application security.

7. Ability to conduct post-exploitation, lateral movement, and privilege escalation techniques in a real-world environment.

8. Experience with social engineering, phishing, and physical security assessments.

9. Understanding of common vulnerabilities (OWASP Top 10, CVE databases, etc.) and their exploitability.

10. Familiarity with security controls and technologies such as SIEM, IDS/IPS, firewalls, EDR, and DLP solutions.

11. Ability to think creatively and out-of-the-box to simulate realistic attack scenarios.

12. Excellent communication skills, both verbal and written, with the ability to produce detailed reports and present findings to non-technical stakeholders.

13. Experience in red team automation or scripting using Python, PowerShell, or Bash.

At KPMG, we value diversity and promote an inclusive work environment. We offer opportunities for professional growth, competitive compensation packages, and the chance to work with esteemed clients on cutting-edge projects in the digital trust domain.

Note: This job description is intended as a guide to the general job responsibility and is subject to change based on business needs and project requirements.