Senior Associate, Cyber Forward Deployed Engineer

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair
360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Senior Associate, Cyber Forward Deployed Engineer to join our Clients, Technology & Innovation (CT&I) organization.

Responsibilities:

Design, build, and ship production-grade features hands-on inside pod standards, delivering in rapid two-to-six-week cycles with direct user feedback

Own end-to-end workstream engineering to ensure hardening, scalability, and exceptional reliability in live, high-scale environments

Execute authorized red team and infiltration tests using frontier cyber models (e.g., Mythos/Fable, Google Argon, Daybreak) against client environments.

Reproduce, validate, and document zero-day findings while building custom tooling, evaluation harnesses, and agentic workflows around security models

Contribute directly to code fixes, software updates, and the remediation of legacy technical debt underlying identified vulnerabilities

Participate in working sessions and demos with stakeholders while operating strictly within written rules of engagement and ethical standards

Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

Minimum four years of recent, hands-on software development experience with deep production engineering expertise (hardening, scaling, and operating live systems across Azure, AWS, or Google Cloud (GCP)
Bachelor's degree from an accredited college/university in a STEM field or five years equivalent practical experience

Strong background in penetration testing, red teaming, vulnerability research, or exploit development, ideally supported by published CVEs or certifications (OSCP, OSEP, OSCE3, GXPN)
Genuine fluency with modern AI coding harnesses (e.g., Claude Code, Cursor, MCP), agentic frameworks, context engineering, and utilizing frontier models for security applications

Demonstrated ability to own outcomes, mentor engineers via code reviews, and thrive with startup velocity and product-oriented execution in ambiguous environments (founder or early-stage startup experience is a strong plus)
Exceptional storytelling and customer-facing presence, with the ability to articulate highly technical concepts and present work clearly to diverse audiences.

Uncompromising judgment regarding ethics, authorization, and sensitive dataA portfolio, Git Hub repository, or code walk-through demonstrating shipped work is a plus Ability to travel domestically as neededKPMG LLP and its affiliates and subsidiaries (“KPMG”) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed.

Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG LLP is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits…