Cyber Response, Senior Associate / Assistant Manager

About the role

KPMG's Cyber Response team helps clients who have experienced a cyber security incident such as ransomware, business e-mail compromise or network intrusion. It investigates the root cause and extent of the breach, helps restore systems and expel intruders, and produces reports used by client management or regulators such as the PDPC. The role sits within a team of forensic professionals, incident coordinators, security professionals, attorneys and corporate partners, and is supervised by managers and associate directors.

Key responsibilities

• Investigate cyber incidents: computer imaging, log file analysis, investigation of computer artefacts, malware analysis and incident reporting.
• Work in project teams, independently but supervised by more experienced colleagues.
• Supervise and advise junior colleagues on their day-to-day tasks.
• Brief colleagues and clients and write parts of incident reports.
• Be flexible to work outside regular office hours, as incidents can happen at any time.

Required profile

• Hunger for knowledge and willingness to keep learning on the job and on your own.
• 3-4 years of experience in a technology-related field, including at least 2 years in a technical cybersecurity role with exposure to incident response and digital forensics.
• Good understanding of networking, the Internet, computers and cyber security.
• Ability to manage multiple projects, present conclusions clearly, write reports in plain English and lead yourself.

Required skills

• Understanding of Microsoft Windows and Linux, including permissions, security models, basic system maintenance and security log review.
• Digital forensics experience or hands-on training.
• Command-line comfort on Linux and ability to write simple looping scripts.
• Programming in a popular language (most bespoke tools are in Python); expected level: reading and parsing log files, calling web APIs and writing results to a file.

What we offer

• Access to industry-leading learning materials with time allocated for learning.
• Flexible working through the Take Charge program, with the option to work from office and home.