Senior Specialist, Web Application Penetration Tester

KPMG Advisory practice is one of our fastest growing practices. We are looking for a Senior Specialist, Web Application Penetration Tester to join our Managed Services practice.

• Conduct manual application penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications
• Perform objective‑based work on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment

• Minimum three years of recent experience in application penetration testing of APIs, web applications, or mobile applications
• Bachelor’s degree from an accredited college or university or equivalent industry experience
• Ability to communicate reporting results with technical and non‑technical audiences and lead remediation conversations
• Experience with Burp Suite Pro and other application testing tools such as Netsparker and Checkmarx
• One or more major ethical hacking certifications preferred (GIAC Web Application Penetration Tester, CREST, Offensive Security Web Expert, Offensive Security Web Assessor)
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment‑based visa sponsorship now or in the future (KPMG does not sponsor U.S. work visas for this opportunity)

KPMG offers a comprehensive compensation package and benefits, including medical, dental, vision, disability, and life insurance, a 401(k) plan, and personal well‑being benefits. Employees also receive annual personal time off and paid holidays.

California Salary Range: $84,500 - $179,300. For additional salary ranges, see Pay Transparency link ().

Mid‑Senior level

Full‑time

Consulting

KPMG is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.