Senior Specialist, Web Application Penetration Tester

Join to apply for the Senior Specialist, Web Application Penetration Tester role at KPMG US
.

We are looking for an experienced professional to join our Managed Services practice and contribute to our rapid growth in consulting services.

• Conduct manual application penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Perform objective‑based penetration testing engagements.
• Execute threat modeling, evaluate application business logic, and conduct application architecture reviews.
• Demonstrate application testing experience in real time via demos to internal and external audiences.
• Operate independently with minimal oversight.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

• Minimum three years of recent experience in application penetration testing of APIs, web applications, or mobile applications.
• Bachelor’s degree from an accredited college/university or equivalent industry experience.
• Ability to communicate test results to technical and non‑technical audiences and lead remediation conversations.
• Experience with Burp Suite Pro and other application testing tools such as Netsparker and Checkmarx.
• One or more major ethical hacking certifications preferred (e.g., GIAC Web Application Penetration Tester, CREST, OSWE, OSWA).
• Ability to travel as required.
• Authorized to work in the U.S. without a requirement for employment‑based visa sponsorship.

We offer a comprehensive, competitive benefits package including medical, dental, vision, disability and life insurance, 401(k) plans, and various well‑being benefits. Detailed benefit information is available on our careers site.

KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.