Senior Cybersecurity Penetration Tester

KTSA - KPMG Technology Services Americas; Región Centro; Hybrid; MXN 900,000 - 1,500,000; Full time

Benefits offered by this job

Extended maternity/paternity/adoption

Learning opportunities and cert.

Wellness and EAP

Comprehensive medical plan

Job summary

KTSA – KPMG Technology Services Americas is seeking an experienced penetration tester to conduct detailed testing of web apps, APIs, networks, and cloud environments. You will document findings with business impact and remediation guidance, and coordinate with multiple teams to validate fixes.

The role requires 5+ years in cybersecurity, hands‑on testing, and relevant certifications. Strong communication and client-facing skills are essential for success in a collaborative, global project

Qualifications

• 5+ years in cybersecurity focused on pen testing and cloud security.
• Hands‑on testing of web apps, APIs, networks, and infrastructure.
• Familiar with MITRE ATT&CK, OWASP Top 10 and PTES.
• Certifications such as OSCP/GPEN/GWAPT are highly preferred.
• Strong communication and client-facing skills.

Responsibilities

• Perform detailed application and network penetration testing engagements.
• Plan and execute tests across web apps, APIs, networks, and cloud environments.
• Document findings with business impact and remediation guidance.
• Coordinate with security and infrastructure teams for remediation.
• Present results to stakeholders through reports and walkthroughs.
• Stay current with evolving threats and testing methodologies.

Skills

Penetration testing

Web app security

API security

Network security

Cloud security

Scripting

Education

Bachelor’s degree in cybersecurity

Relevant certifications

Tools

MITRE ATT&CK

OWASP Top 10

OWASP API Security Top 10

PTES

OSCP

GPEN

GWAPT

Azure cloud certifications

Job description

KTSA – KPMG Technology Services Americas is seeking an experienced penetration tester to conduct detailed testing of web apps, APIs, networks, and cloud environments. You will document findings with business impact and remediation guidance, and coordinate with multiple teams to validate fixes.

The role requires 5+ years in cybersecurity, hands‑on testing, and relevant certifications. Strong communication and client-facing skills are essential for success in a collaborative, global project