Senior Penetration Testing Manager | Remote & Flexible

KTSA - KPMG Technology Services Americas; Región Centro; Presencial; MXN 550.000 - 950.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

KTSAMÁS total rewards program

Learning opportunities & certification

Flexible working arrangements

Descripción de la vacante

KTSA - KPMG Technology Services Americas is seeking a seasoned Penetration Tester to conduct detailed security assessments and remediation guidance across web applications, APIs, networks, and cloud environments. You will document findings, engage with stakeholders, and stay current on evolving threats.

The role requires working with clients and internal teams to plan, execute, and communicate results, leveraging strong scripting skills and cloud security expertise.

Formación

• Bachelor’s degree with 5+ years of practical cybersecurity experience.
• Hands-on testing of web apps, APIs, networks, and cloud environments beyond automated scans.
• Familiarity with MITRE ATT&CK, OWASP Top 10, OWASP API Security Top 10, PTES.

Responsabilidades

• Conduct detailed application and network penetration testing engagements to identify exploitable vulnerabilities and remediation paths.
• Plan and execute testing across web apps, APIs, networks, cloud environments, and supporting infrastructure.
• Assess common security weaknesses including authentication, authorization, injections, business logic flaws, insecure configurations, and data exposure.
• Document findings with business impact, evidence, risk context, reproducible steps, and remediation guidance.

Conocimientos

Penetration testing

Manual testing

Cloud security

Scripting (Python/Bash/PowerShell)

Communication

Client collaboration

Educación

Bachelor’s degree in cybersecurity or related field

Herramientas

Python

Bash

PowerShell

Penetration testing tools

Descripción del empleo

KTSA - KPMG Technology Services Americas is seeking a seasoned Penetration Tester to conduct detailed security assessments and remediation guidance across web applications, APIs, networks, and cloud environments. You will document findings, engage with stakeholders, and stay current on evolving threats.

The role requires working with clients and internal teams to plan, execute, and communicate results, leveraging strong scripting skills and cloud security expertise.