Manager, Cyber Forward Deployed Engineer

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair
360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Manager, Cyber Forward Deployed Engineer to join our Clients, Technology & Innovation (CT&I) organization.

Responsibilities:

Own the technical vision and system architecture for the pod's solutions, actively writing and shipping robust production code weekly while establishing high engineering standards for hardening, scalability, and live-environment reliability

Direct full-lifecycle offensive engagements from scoping and strict legal rules of engagement through execution and executive readout, deploying frontier cyber models (e.g., Mythos/Fable, Google Argon, Daybreak) to uncover critical vulnerabilities, including zero-days Bridge the gap between finding flaws and fixing them by designing software updates, patches, and code refactors that eliminate root-cause technical debt and harden client applications

Develop and maintain the pod's proprietary offensive tooling and agentic workflows, implementing rigorous evaluation harnesses, golden vulnerability datasets, automated regression testing, and human-in-the-loop safeguards

Drive deliverables in fast-paced two-to-six-week delivery cycles, actively managing risk, identifying technical constraints early, and ensuring every release is production-ready and fully contained within authorized parameters

Lead technical and executive working sessions across engineering groups, CISOs, and C-suite stakeholders, while coaching pod engineers to sustain talent density, quality, and execution speed

Integrate automated security testing, policy-as-code, and compliance gates directly into the Harness engineering pipeline to catch vulnerabilities before deployment

Build specific defense profiles for dual-model setups to include mitigating prompt injection and data poisoning for LLMs, while ensuring input validation, algorithmic tampering defenses, and bypass prevention for deterministic Type 1 models (e.g., Jev)
Analyze customer journey path models to discover logical vulnerabilities, privilege escalation vectors, or states where non-deterministic LLM behavior can break the intended business logic flow

Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

Minimum seven years of recent, hands-on offensive security experience (red teaming, penetration testing, exploit development, or vulnerability research) paired with active, current production software engineering capability (e.g., Python, Go, Rust, or Java); published research, CVEs, or certifications (OSCP, OSEP, OSCE3, GXPN) are strong pluses

Minimum three years of hands-on leadership managing, mentoring, and scaling high-performing engineering teams; thrives with ambiguity and a bias toward shipping outcomes (founder or early-stage startup experience is a strong plus)
Bachelor's degree from an accredited college/university in a STEM field or eight years equivalent practical experience

Demonstrated experience building, hardening, and operating scalable systems in live enterprise environments across Azure, AWS, or Google Cloud (GCP), with proven ability to refactor…