{"id":1689284,"url":"https://alion.io/job/kpmg-consultant-cyber-defense-offensive-security","title":"Consultant - cyber defense - offensive security","company":{"id":1186989,"name":"KPMG Canada","domain":"kpmg.ca","url":"https://alion.io/company/kpmg-ca","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":94000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":22},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-09-05T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-05T00:00:00Z","board_verified":false,"closed_at":null,"days_open":52,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":52},"description":"Overview\n\nAt KPMG in Canada, our people bring their unique perspectives to Canada’s most important challenges. Here, you can build momentum that reaches beyond our business, develop skills for the future, and take ownership of your career with support at every stage. Join a firm where your career can make a difference.\n\nAre you a talented individual with a proven track record on executing project deliverables. \n\nThis is a key role within the Cyber Defense – Offensive Security Team at KPMG, where the candidate will serve as a subject matter expert primarily in web application security, and also perform infrastructure vulnerability assessment and penetration testing, red/purple team assessment and social engineering exercises. The selected candidate will work on client projects to understand requirements, conduct manual and automated penetration tests, draft reports and provide detailed walkthroughs of the reports to relevant client stakeholders.\n\nWhat you will do\n\nPerform manual and automated application security assessments on web applications, mobile applications and network infrastructure using industry standards. This includes controlled exploitation of identified vulnerabilities, simulating real-world attacks through manual penetration testing.\nDefine and execute test cases to identify and exploit vulnerabilities and weaknesses.\nAnalyze the impact and severity of exploits, determining the associated risks and potential consequences.\nDocument findings and provide pragmatic recommendations. Clearly and effectively communicate the findings to client stakeholders.\nStay updated with the latest security vulnerabilities, techniques, and industry best practices.\n\nWhat you bring to the role\n\nBachelor’s or relevant degree in Computer Science, Information Security, or a related field.\nMinimum of 1 year of experience in application security testing.\nKnowledge of performing infrastructure vulnerability assessment and penetration testing, red team assessment and social engineering.\nExpertise in security testing frameworks, including:\nOpen Web Application Security Project (OWASP)\nOpen-Source Security Testing Methodology Manual (OSSTMM)\nPenetration Testing Execution Standard (PTES)\nProgramming knowledge (python, java)\nRelevant certifications, such as:\nOffensive Security Certified Professional (OSCP)\nBurp Suite Certified Practitioner (BSCP)\nHTB Certified Penetration Testing Specialist (HTB CPTS)\nPreferred Qualifications\nExcellent communication skills to present findings and recommendations to technical and non-technical stakeholders.\nAbility to work independently and collaboratively in a fast-paced, client-facing environment.\nExperience in consulting or professional services, particularly in offensive security.\nWe prioritize candidates that demonstrate a strong passion for cybersecurity and have hands-on experience showcasing their skills in a local lab environment, such as through capture-the-flag (CTF) competitions, personal lab projects, or open-source contributions.\n\nKPMG Ontario Region Pay Range Information\nThe expected base salary range for this position is $73,500 to $122,500 and may be eligible for bonus awards. The determination of an applicant’s base salary within this range is based on the individual’s location, skills & competencies, and unique qualifications. In addition, KPMG offers a comprehensive and competitive Total Rewards program.\n\nProviding you with the support you need to be at your best\n\nOur Values, The KPMG Way\n\nIntegrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters\n\nKPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice.\n\nAdjustments and accommodations throughout the recruitment process\n\nAt KPMG, we are committed to fostering an inclusive recruitment process where all candidates can be themselves and excel. We aim to provide a positive experience and are prepared to offer adjustments or accommodations to help you perform at your best. Adjustments (informal requests), such as extra preparation time or the option for micro breaks during interviews, and accommodations (formal requests), such as accessible communication supports or technology aids, are tailored to individual needs and role requirements. You will have an opportunity to request an adjustment or accommodation at any point throughout the recruitment process. If you require support, please contact KPMG’s Employee Relations Service team by calling 1-888-466-4778.\n\nAI Usage\n\nWe embrace the use of artificial intelligence (AI) to enhance the candidate experience and streamline our recruitment processes. AI tools may help with organizing applications or surfacing relevant qualifications. However, no hiring decisions are made using AI. Every hiring decision is made by our hiring managers and recruitment professionals, who are equipped with training that empowers them to use these tools responsibly. AI technologies used in our recruitment process undergo detailed risk assessments, including security and privacy requirements, that align with KPMG’s Trusted AI framework.\n\nWe believe technology should empower human judgment, not replace it. It’s one of the many ways we’re delivering on our vision of being a technology-first, people-driven firm.","description_format":"text","description_chars":5720,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","C4ISR","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-02T10:40:56Z"},{"event":"close","at":"2026-10-05T14:36:00Z"},{"event":"reopen","at":"2026-10-20T07:43:45Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"evidence":"Positions approved through LMIA in 12 months: 13","filings_12m":13,"filings_prev_12m":22,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage; Global Talent Stream","cap_exempt":false,"checked_at":"2026-10-03T21:10:52+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":1}],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.591,"p_room":0.36,"age_days":52,"expected_fill_days":30,"reasons":["seen:52","velocity","win:tail","crowd:junior"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/kpmg-consultant-cyber-defense-offensive-security","json_url":"https://alion.io/job/kpmg-consultant-cyber-defense-offensive-security.json","meta":{"generated_at":"2026-10-27T12:08:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14513,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1186989},"rest":"https://alion.io/mcp/rest/get_company?id=1186989"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkpmg-consultant-cyber-defense-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkpmg-consultant-cyber-defense-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkpmg-consultant-cyber-defense-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kpmg-consultant-cyber-defense-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkpmg-consultant-cyber-defense-offensive-security"}]}