Senior Specialist, MAST Application Penetration Tester

KPMG US; New York (NY); On-site; USD 90,000 - 130,000; Full time

Job summary

A leading company in advisory services is seeking a Senior Specialist, MAST Application Penetration Tester. This role involves conducting application penetration testing across various platforms and requires strong communication skills and relevant experience. Join a collaborative team where you can grow professionally and make a significant impact.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Life Insurance

Disability Insurance

Qualifications

• Minimum three years of recent experience in application penetration testing.
• Ability to communicate testing results effectively.

Responsibilities

• Conduct manual application penetration testing against APIs, Web, and Mobile applications.
• Work independently on penetration testing engagements.

Skills

Communication

Ethical Hacking

Education

Bachelor's degree

Tools

Burp Suite Pro

Netsparker

Checkmarx

Job description

Join to apply for the Senior Specialist, MAST Application Penetration Tester role at KPMG US.

KPMG Advisory practice is currently our fastest growing practice. We are experiencing tremendous client demand and expect this trend to continue. Our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our top priority. We offer extensive learning and career development opportunities, a world-class training facility, and leading market tools to support professional and personal growth. If you seek a firm with a strong team connection where you can be your whole self, make an impact, enhance your skills, and explore new areas of inspiration, consider a career in Advisory.

KPMG is seeking a Senior Specialist, MAST Application Penetration Tester to join our Managed Services practice.

Responsibilities:

1. Conduct manual application penetration testing against APIs (REST/SOAP), Web Applications, Mobile applications, and thick client applications.
2. Perform testing based on defined engagement objectives.
3. Execute threat modeling, evaluate application business logic, and review application architecture.
4. Demonstrate application testing skills through demos to internal and external audiences.
5. Work independently on penetration testing engagements with minimal oversight.
6. Maintain integrity, professionalism, and personal responsibility to uphold KPMG's respectful work environment.

Qualifications:

1. Minimum three years of recent experience in application penetration testing of APIs, web, or mobile applications.
2. Bachelor's degree or equivalent industry experience.
3. Ability to communicate testing results effectively to technical and non-technical audiences and lead remediation discussions.
4. Experience with testing tools like Burp Suite Pro, Netsparker, and Checkmarx.
5. Ethical hacking certifications (e.g., GWAPT, CREST, OSWE, OSWA) are preferred but not required.
6. Willingness to travel as needed.
7. Authorized to work in the U.S. without sponsorship now or in the future; no visa sponsorship available.

KPMG complies with local/state salary disclosure laws. Salary ranges vary by location and are based on relevant factors. Our Total Rewards package includes medical, dental, vision, disability, life insurance, 401(k), and well-being benefits. Additional benefits and details are available on our careers site.