Description
About KPMG in India
KPMG entities in India are qualified services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.
KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business workplace.

Responsibilities
Vulnerability Assessment & Penetration Testing (VAPT)
Perform vulnerability assessments and penetration testing on applications, networks, systems, and APIs
Conduct manual and automated testing (web, network, cloud, and infrastructure)




Identify, validate, and exploit security vulnerabilities and misconfigurations
Prepare detailed VAPT reports including risk ratings, impact analysis, and remediation guidance
Re-test vulnerabilities to validate fixes
Align testing activities with OWASP Top 10, SANS Top 25, and industry best practices

Incident Response (IR)
Monitor, analyze, and respond to security incidents including malware, phishing, ransomware, and unauthorized access
Perform incident triage, containment, eradication, and recovery
Analyze logs, alerts, and security events from SIEM and EDR tools
Support root cause analysis and post-incident reporting
Assist in improving incident response playbooks and processes
Coordinate with SOC, IT, and other stakeholders during incident handling

Qualifications
2+ years of experience in VAPT and/or Incident Response
Robust understanding of:
Web application secu

📌 Analyst Appsec Bengaluru
🏢 Bsr
📍 Bengaluru