Cyber Security Expert

Description

We are KPMG's technology arm in Israel. KPMG delves headfirst into the power of emerging technologies and scientific breakthroughs to craft solutions, projects, and products for companies facing complex business challenges in today's continuously changing world. By uniting groundbreaking technology with industry expertise, we are able to harness the potential of cloud, AI, ML, digital, and cyber to design and implement top-of-the-line tailored solutions.

This role requires a deep understanding of cybersecurity practices, the ability to identify and mitigate security vulnerabilities.

The Expert will work closely with development, infrastructure, and security teams to ensure the Client’s organization systems remain secure against internal and external threats.

Key Responsibilities:

Security Testing & Assessments:

• Conduct comprehensive security assessments on infrastructure components such as servers, networks, firewalls, databases, and cloud environments.
• Perform application audits, which includes API security, WAF configuration, and implementing best practices.
• Identify vulnerabilities, misconfigurations, and weaknesses in systems, applications, and network environments.
• Ensure security assessments align with industry regulations, standards (e.g., ISO 27001, NIST, PCI-DSS), and organizational policies.

Vulnerability Management:

• Analyze and prioritize identified vulnerabilities and work with teams to remediate findings.
• Assist with the development and implementation of mitigation strategies to address vulnerabilities.
• Perform periodic retesting of identified vulnerabilities to confirm mitigation.

Security Reporting & Documentation:

• Document findings in clear, concise reports, providing actionable recommendations for security improvements.
• Develop comprehensive security assessment reports, including executive summaries for management.

Requirements

• 2 years of experience in cyber security -Must
• Technical Background with technologies, products and solutions in the field of information and cyber security such as: Firewalls, Mail Relay, Proxy, NAC, EDR, VPN, SIEM etc. - Must
• Proficiency in working in Windows environments: Active Directory, Exchange.
• Knowledge in Networking protocols technology & Hybrid environments architecture - Advantage
• Cyber Security certifications from different vendors – Advantage
• Working for a consulting or integration company – Advantage
• Location – Client Site & Office
• Fluent English - reading, speaking and writing technical reports (additional languages - an advantage)

The position is open for all genders as well as people with disabilities.