Manager, Penetration Testing

KTSA - KPMG Technology Services Americas; Región Centro; Presencial; MXN 550.000 - 950.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

KTSAMÁS total rewards program

Learning opportunities & certification

Flexible working arrangements

Descripción de la vacante

KTSA - KPMG Technology Services Americas is seeking a seasoned Penetration Tester to conduct detailed security assessments and remediation guidance across web applications, APIs, networks, and cloud environments. You will document findings, engage with stakeholders, and stay current on evolving threats.

The role requires working with clients and internal teams to plan, execute, and communicate results, leveraging strong scripting skills and cloud security expertise.

Formación

• Bachelor’s degree with 5+ years of practical cybersecurity experience.
• Hands-on testing of web apps, APIs, networks, and cloud environments beyond automated scans.
• Familiarity with MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, PTES.

Responsabilidades

• Conduct detailed application and network penetration testing engagements to identify exploitable vulnerabilities and remediation paths.
• Plan and execute testing across web apps, APIs, networks, cloud environments, and supporting infrastructure.
• Assess common security weaknesses including authentication, authorization, injections, business logic flaws, insecure configurations, and data exposure.
• Document findings with business impact, evidence, risk context, reproducible steps, and remediation guidance.

Conocimientos

Penetration testing

Manual testing

Cloud security

Scripting (Python/Bash/PowerShell)

Communication

Client collaboration

Educación

Bachelor’s degree in cybersecurity or related field

Herramientas

Python

Bash

PowerShell

Penetration testing tools

Descripción del empleo

We are KTSA - KPMG Technology Services Americas.

A Service Delivery Center of KPMG US, with offices in Mexico City, Guadalajara, and a growing network of remote talent across the country. We deliver high-value technology, consulting, and corporate support services to KPMG US and its clients.

At KTSA, our Employer Value Proposition is clear: Explore.

Explore isn't just a word - it’s how we grow, lead, and thrive. It's the mindset that drives our culture and shapes every opportunity:

• Experience a collaborative, inclusive, and multicultural workplace where you belong.
• Excel by creating impact and leaving your mark on global projects.
• Expand your potential with real career paths, learning programs, and mentorship.
• Express your individuality - come as you are, and thrive as your authentic self.

Key Responsibilities:

• Conduct detailed application and network penetration testing engagements to identify exploitable vulnerabilities, control gaps, and practical paths to remediation.
• Plan and execute penetration testing activities across web applications, APIs, external and internal networks, cloud-hosted environments, and supporting infrastructure, as applicable to the engagement scope.
• Assess common application and API security weaknesses, including authentication flaws, authorization issues, injection vulnerabilities, business logic flaws, insecure configurations, and exposure of sensitive data.
• Document findings clearly, including business impact, technical evidence, risk context, reproducible steps, and practical remediation guidance for member firm stakeholders.
• Facilitate security assessments and support the resolution of identified vulnerabilities through clear communication, retesting, and coordination with application, infrastructure, and security teams.
• Communicate assessment results to technical and non-technical stakeholders through written reports, walkthroughs, and remediation discussions.
• Stay current with common and emerging security threats, penetration testing techniques, tooling, and assessment methodologies relevant to application and network security.

Qualifications:

• Bachelor’s degree with 5+ years of practical experience in cybersecurity, focused on application penetration testing, network penetration testing, and related cloud security assessment activities.
• Strong hands-on experience performing manual web application, API, network, and infrastructure penetration testing, including validation beyond automated scanning tools.
• Strong familiarity with frameworks and methodologies such as MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, PTES.
• Relevant certifications such as OSCP, GPEN, GWAPT, OSCE, GXPN, or similar are highly preferred. CISSP and Azure or other cloud platform certifications are a plus.
• Solid foundation in network, application, and cloud security concepts, with hands-on experience identifying, validating, and explaining vulnerabilities in real-world environments.
• Proficiency in scripting and automation with experience in Python, Bash, or PowerShell.
• Experience with common and emerging security threats, scanning tools, exploitation techniques, assessment methodologies, and secure remediation practices.
• Demonstrated understanding of security principles, IT security controls, and related technologies and products.
• Strong verbal and written communication, problem solving, analytical, and independent judgment skills to support an environment driven by customer service, collaboration, and teamwork.
• Experience working directly with clients, project stakeholders, or business units to clarify scope, communicate findings, and support remediation efforts.

And because we know that thriving at work also means thriving in life, we back this mindset with KTSAMÁS, our total rewards program, designed to support your well-being, goals, and personal milestones.

Expand your possibilities with KTSA through KTSAMÁS, where you can access:

• Extended maternity, paternity, and adoption leaves
• Learning opportunities, training, and certification programs
• Extended marriage leave and daycare support
• Wellness and Employee Assistance Programs (EAP)
• Comprehensive medical plan, life insurance, car insurance, and funeral assistance

Visit www.ktsa.com.mx to learn more.

At KTSA, we celebrate and support everyone’s individuality. We do not discriminate against any race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, or disability. We are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss specific requirements and our range of flexible working arrangements could be of interest. Please ask to find out more. We strongly state that we DO NOT require a certificate of non-pregnancy or HIV in order to participate in any of our processes.

Explore KTSA, we dare to be different!

Home - KTSA

KTSA - KPMG Technology Services of Americas