Associate Consultant- VAPT - AppSec / Red Teaming

About KPMG in India

KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.

KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.

• Implement and manage OT security controls across industrial environments
  • Monitor and analyze security events related to OT systems (SCADA, PLCs, DCS, HMIs)
  • Conduct OT network segmentation, access control reviews, and firewall policy updates
  • Perform vulnerability assessments and risk analysis for OT assets
  • Manage and maintain OT/ICS security tools such as:
  • • Claroty, Nozomi, Dragos
  • • IDS/IPS for OT networks
  • • SIEM tools integrated with OT logs
  • Support incident response activities for OT-related security events
  • Ensure secure integration between IT and OT networks
  • Work with engineering teams, plant operations, and vendors to implement security best practices
  • Develop and maintain OT security policies, procedures, and compliance documentation
  • Conduct asset discovery, baseline mapping, and network traffic analysis
  • Support audits, compliance reviews, and OT security assessments
  • Provide guidance on secure configuration of OT devices and systems

• 4+ years of experience in OT / ICS / SCADA security

• Strong understanding of industrial protocols such as Modbus, DNP3, OPC, Profibus, BACnet

• Experience with OT security platforms (Claroty, Nozomi, Dragos, etc.)

• Knowledge of OT network architecture, Purdue Model, segmentation, and access control

• Good understanding of cybersecurity fundamentals such as:

  • Threat detection

  • Vulnerability management

  • Incident response

  • Network security

• Familiarity with standards like IEC 62443, NIST CSF, NERC CIP (preferred)

• Experience working with industrial control systems (PLC, DCS, SCADA)

• Ability to collaborate with plant operations, OEMs, and cross‑functional teams