Jobs · Washington

Director, Adversarial Testing Program Leader

KPMG US · Seattle, WA · 3 wk ago
Hybrid$198k/yrFull-time
We need to output HTML fragment with sections: About the role? The posting includes introductory paragraph about KPMG and then "KPMG is currently seeking a Director, Adversarial Testing Program Leader". The instructions: do NOT repeat the job title as a heading (the page already shows it). So we should not put a heading for the job title. We can have sections: About the role (maybe the intro paragraph), Responsibilities, Qualifications, Benefits, Pay, Schedule? We need to include sections only when posting has real specific content. The posting includes responsibilities list, qualifications list, benefits description, salary range (California Salary Range: $198000 - $368000). Also mentions "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year." That's schedule info? It mentions standard work hours, personal time off, holidays, breaks. That's schedule/benefits. We can include a Schedule section with that info. Benefits section includes medical, dental, vision, disability, life insurance, 401(k), personal well-being benefits. Also mention "Total Rewards package includes ...". So we can have Benefits section. Pay section: include salary range. Also mention "KPMG offers a comprehensive compensation and benefits package." But we should not include filler like "commensurate with experience". The salary range is specific. We need to remove boilerplate: EEO, equal opportunity, legal, scam warning, application instructions, cookie/navigation, etc. Also remove duplicated lines. Remove "KPMG is an equal opportunity employer..." etc. Remove "No phone calls or agencies please." Remove "KPMG recruits on a rolling basis." Remove "Los Angeles County applicants: Material job duties..." etc. Also remove "Follow this link to obtain salary ranges by city outside of CA: ..."? That's maybe considered application instruction? It's a link for salary ranges; but it's not exactly application instruction. However it's a link; maybe we can keep? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. The link to salary ranges might be considered application instruction? It's not exactly applying but providing info. Might be okay to keep? But we already have salary range in the posting; we could keep the link as part of Pay section? Might be considered extra. Safer to drop it. Also remove "Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday." That's schedule info. We need to preserve all substantive information. So we need to keep the responsibilities bullet points, qualifications bullet points, benefits description, salary range, schedule info. We must not repeat the job title as heading. So we can start with a section "About the role" containing the introductory paragraph about KPMG and the role? The intro: "Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Director, Adversarial Testing Program Leader to join our Enterprise Security Services organization." We can put that in with heading

About the role

and then

...

. Ensure we don't repeat job title as heading; it's okay inside paragraph. Then Responsibilities:

Responsibilities

  • ... each bullet. Qualifications:

    Qualifications

    • ... each bullet. Benefits:

      Benefits

      • ... maybe combine into paragraphs? The benefits description is prose; we can put

        ...

        . But instruction: Use
        • for any list of duties/requirements/benefits, and

          for prose. Benefits is a list of items (medical, dental, vision, disability and life insurance, 401(k) plans, personal well-being benefits). Could be a list. We'll do

          • Medical and dental plans
          • etc. Pay:

            Pay

            California Salary Range: $198,000 - $368,000

            . Also maybe mention "KPMG offers a comprehensive compensation and benefits package." That's somewhat filler but not prohibited. Could include as prose. Schedule:

            Schedule

            Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday.

            We must not include sections with filler like "commensurate with experience". We have none. We must not include duplicated lines. Ensure we don't repeat. We must not include Job ID/requisition numbers as headings; none. We must not include application instructions: we removed. Now produce HTML fragment only. Let's craft. Check responsibilities bullets: The posting had a long sentence with no clear bullet separation but we can split by sentences. The responsibilities text: "Lead the program in conducting adversary emulation and advanced offensive security assessments, pinpointing vulnerabilities, and recommending improvements that measurably strengthen detection, response, and defensive controlsDirect network, infrastructure, and application penetration testing efforts to proactively discover and address security weaknesses across the enterprise estatePartner with defensive operations, threat intelligence, and engineering teams to translate offensive findings into durable control improvements and to validate detection coverage against current adversary tradecraftOversee strategic security initiatives, aligning them with the organization's goals and risk management strategies, and stay abreast of the latest threats so that testing strategies evolve with the threat landscapeCultivate a team culture of continuous learning and technical development within the security organizationPeople management responsibility for a small to mid-sized team of entry level through intermediate level professionals, and contract and vendor oversight to ensure compliance with security requirements and effective use of resourcesAct with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment" We need to split into sensible bullet points. Could be: - Lead the program in conducting adversary emulation and advanced offensive security assessments, pinpointing vulnerabilities, and recommending improvements that measurably strengthen detection, response, and defensive controls - Direct network, infrastructure, and application penetration testing efforts to proactively discover and address security weaknesses across the enterprise estate - Partner with defensive operations, threat intelligence, and engineering teams to translate offensive findings into durable control improvements and to validate detection coverage against current adversary tradecraft - Oversee strategic security initiatives, aligning them with the organization's goals and risk management strategies, and stay abreast of the latest threats so that testing strategies evolve with the threat landscape - Cultivate a team culture of continuous learning and technical development within the security organization - People management responsibility for a small to mid-sized team of entry level through intermediate level professionals, and contract and vendor oversight to ensure compliance with security requirements and effective use of resources - Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment That seems fine. Qualifications bullets: The posting: "Minimum ten years of recent experience in information security, with a strong emphasis on adversarial testing, DAST/SAST, and penetration testingMaster's degree from an accredited college or university is highly desired; Bachelor's degree from an accredited college in information security, computer science, or a related field is preferred; minimum of a high school diploma or GED is requiredDemonstrated leadership capabilities, with the ability to guide and motivate a specialized team, with excellent communication skills, with the proficiency to convey complex security concepts to a broad audienceExpertise in managing purple team operations, DAST/SAST, and penetration testing initiatives, along with knowledge of the latest adversarial testing tools, techniques, and best practices preferredStrategic thinking, with the capacity to turn security challenges into business opportunities and experience in leading security strategy and operations within a large, complex organization preferredApplicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)" We need to split into bullet points: - Minimum ten years of recent experience in information security, with a strong emphasis on adversarial testing, DAST/SAST, and penetration testing - Master's degree from an accredited college or university is highly desired; Bachelor's degree from an accredited college in information security, computer science, or a related field is preferred; minimum of a high school diploma or GED is required - Demonstrated leadership capabilities, with the ability to guide and motivate a specialized team, with excellent communication skills, with the proficiency to convey complex security concepts to a broad audience - Expertise in managing purple team operations, DAST/SAST, and penetration testing initiatives, along with knowledge of the latest adversarial testing tools, techniques, and best practices preferred - Strategic thinking, with the capacity to turn security challenges into business opportunities and experience in leading security strategy and operations within a large, complex organization preferred - Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa) That's fine. Benefits bullets: The posting: "In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health." We can bullet: - Medical and dental plans - Vision coverage - Disability and life insurance - 401(k) plans - Personal well-being benefits to support mental health Also maybe mention "comprehensive, competitive benefits package" but that's prose. We'll put as list. Pay: include California Salary Range: $198,000 - $368,000. Also maybe mention "KPMG offers a comprehensive compensation and benefits package." Could be prose. Schedule: as above. Now produce HTML. We need to wrap sections maybe in but not required. Just output headings and content. Let's craft:

            About the role

            Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embra

Similar jobs