KPMG logo

Manager, Cyber Forward Deployed Engineer

KPMG

SALT LAKE CITY, UTJobSeen 1 day agoSeen in employer's feed 1 day ago

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

At a glance

Compensation
No compensation found
Location
SALT LAKE CITY, UT
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

KPMG is seeking a Manager, Cyber Forward Deployed Engineer for its Clients, Technology and Innovation organization. The role owns technical vision and architecture, delivers offensive security engagements, develops production software and proprietary tooling, and helps clients remediate vulnerabilities. It also integrates security testing into engineering pipelines and leads technical and executive sessions. The posting requires at least seven years of recent hands-on offensive security experience alongside current production software engineering capability.

Skills & qualifications

RequiredNice to have

Skills

Offensive SecurityRed TeamingPenetration TestingExploit DevelopmentVulnerability ResearchProduction Software EngineeringPythonGoRustJava

Qualifications

7+ Years Offensive Security Experience

Full job description

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Cyber Forward Deployed Engineer to join our Clients, Technology and Innovation (CTandI) organization. Responsibilities: * Own the technical vision and system architecture for the pod's solutions, actively writing and shipping robust production code weekly while establishing high engineering standards for hardening, scalability, and live-environment reliability * Direct full-lifecycle offensive engagements from scoping and strict legal rules of engagement through execution and executive readout, deploying frontier cyber models (e.g., Mythos/Fable, Google Argon, Daybreak) to uncover critical vulnerabilities, including zero-days * Bridge the gap between finding flaws and fixing them by designing software updates, patches, and code refactors that eliminate root-cause technical debt and harden client applications * Develop and maintain the pod's proprietary offensive tooling and agentic workflows, implementing rigorous evaluation harnesses, golden vulnerability datasets, automated regression testing, and human-in-the-loop safeguards * Drive deliverables in fast-paced two-to-six-week delivery cycles, actively managing risk, identifying technical constraints early, and ensuring every release is production-ready and fully contained within authorized parameters * Lead technical and executive working sessions across engineering groups, CISOs, and C-suite stakeholders, while coaching pod engineers to sustain talent density, quality, and execution speed * Integrate automated security testing, policy-as-code, and compliance gates directly into the Harness engineering pipeline to catch vulnerabilities before deployment * Build specific defense profiles for dual-model setups to include mitigating prompt injection and data poisoning for LLMs, while ensuring input validation, algorithmic tampering defenses, and bypass prevention for deterministic Type 1 models (e.g., Jev) * Analyze customer journey path models to discover logical vulnerabilities, privilege escalation vectors, or states where non-deterministic LLM behavior can break the intended business logic flow * Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment Qualifications: * Minimum seven years of recent, hands-on offensive security experience (red teaming, penetration testing, exploit development, or vulnerability research) paired with active, current production software engineering capability (e.g., Python, Go, Rust, or Java);... For full info follow application link. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link "https://assets.kpmg.com/content/dam/kpmg/us/pdf/2018/09/eeo.pdf? "contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. No phone calls o r agencies please.

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.