Director, Adversarial Testing Program Leader

KPMG is currently seeking a Director, Adversarial Testing Program Leader to join our Enterprise Security Services organization.

Responsibilities:

• Lead the program in conducting adversary emulation and advanced offensive security assessments, pinpointing vulnerabilities, and recommending improvements that measurably strengthen detection, response, and defensive controls
• Direct network, infrastructure, and application penetration testing efforts to proactively discover and address security weaknesses across the enterprise estate
• Partner with defensive operations, threat intelligence, and engineering teams to translate offensive findings into durable control improvements and to validate detection coverage against current adversary tradecraft
• Oversee strategic security initiatives, aligning them with the organization's goals and risk management strategies, and stay abreast of the latest threats so that testing strategies evolve with the threat landscape
• Cultivate a team culture of continuous learning and technical development within the security organization
• People management responsibility for a small to mid-sized team of entry level through intermediate level professionals, and contract and vendor oversight to ensure compliance with security requirements and effective use of resources
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum ten years of recent experience in information security, with a strong emphasis on adversarial testing, DAST/SAST, and penetration testing
• Master's degree from an accredited college or university is highly desired; Bachelor’s degree from an accredited college in information security, computer science, or a related field is preferred; minimum of a high school diploma or GED is required
• Demonstrated leadership capabilities, with the ability to guide and motivate a specialized team, with excellent communication skills, with the proficiency to convey complex security concepts to a broad audience
• Expertise in managing purple team operations, DAST/SAST, and penetration testing initiatives, along with knowledge of the latest adversarial testing tools, techniques, and best practices preferred
• Strategic thinking, with the capacity to turn security challenges into business opportunities and experience in leading security strategy and operations within a large, complex organization preferred
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)