Senior Specialist, Web Application Penetration Tester

Senior Specialist, Web Application Penetration Tester

Join KPMG US’s Managed Services practice as a Senior Specialist in Web Application Penetration Testing. In this role you will conduct manual penetration tests of APIs, web and mobile applications, and evaluate application architectures.

• Conduct manual application penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Perform objective based on abstract penetration testing engagements.
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews.
• Demonstrate application testing experience in real time via demos to both internal and external audiences.
• Function independently in penetration testing engagements with minimal oversight.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment.

• Minimum three years of recent experience in application penetration testing of APIs, web or mobile applications.
• Bachelor’s degree from an accredited college/university or equivalent industry experience.
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations.
• Experience with Burp Suite Pro and other application testing tools such as Netsparker and Checkmarx.
• One or more major ethical hacking certifications (preferred: GWAPT, CREST, OSWE, OSWA).
• Ability to travel as required.
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship. No sponsorship is available for H‑1B, L‑1, TN, etc.

We are an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, and local laws.