Senior Penetration Testing Manager

KTSA - KPMG Technology Services Americas; Ciudad de México; Presencial; MXN 900.000 - 1.500.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Wellness programs

Learning and certification programs

Comprehensive medical plan

Descripción de la vacante

KTSA – KPMG Technology Services Americas is seeking an experienced security professional to conduct thorough application, API, network, and cloud testing. You will identify exploitable vulnerabilities, document their business impact, and guide remediation with cross-functional teams in a client-focused environment.

Offices exist in Mexico City and Guadalajara, with remote talent supporting US clients. The role emphasizes hands-on testing, MITRE ATT&CK and OWASP methodology, and strong scripting

Formación

• Bachelor’s degree with 5+ years in cybersecurity, focusing on app and network pen testing.
• Hands-on testing of web apps, APIs, networks, and cloud environments beyond automated tools.
• Familiar with MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, PTES.
• Certifications OSCP, GPEN, GWPAT, OSCE, GXPN preferred; CISSP and cloud cert a plus.
• Strong scripting in Python, Bash, or PowerShell.
• Strong communication and client-facing skills.

Responsabilidades

• Conduct detailed application and network penetration testing engagements to identify exploitable vulnerabilities, control gaps, and practical paths to remediation.
• Plan and execute penetration testing activities across web applications, APIs, external and internal networks, cloud-hosted environments, and supporting infrastructure, as applicable to the engagement scope.
• Assess common application and API security weaknesses, including authentication flaws, authorization issues, injection vulnerabilities, business logic flaws, insecure configurations, and exposure of sensitive data.
• Document findings clearly, including business impact, technical evidence, risk context, reproducible steps, and practical remediation guidance for member firm stakeholders.
• Facilitate security assessments and support the resolution of identified vulnerabilities through clear communication, retesting, and coordination with application, infrastructure, and security teams.
• Communicate assessment results to technical and non-technical stakeholders through written reports, walkthroughs, and remediation discussions.
• Stay current with common and emerging security threats, penetration testing techniques, tooling, and assessment methodologies relevant to application and network security.

Conocimientos

Penetration testing

Web app testing

Network testing

Cloud security

Scripting (Python)

Communication

MITRE ATT&CK

OWASP Top 10

PTES

Educación

Bachelor’s degree in cybersecurity or related field

Descripción del empleo

KTSA – KPMG Technology Services Americas is seeking an experienced security professional to conduct thorough application, API, network, and cloud testing. You will identify exploitable vulnerabilities, document their business impact, and guide remediation with cross-functional teams in a client-focused environment.

Offices exist in Mexico City and Guadalajara, with remote talent supporting US clients. The role emphasizes hands-on testing, MITRE ATT&CK and OWASP methodology, and strong scripting