Senior Specialist, Web Application Penetration Tester

We are seeking a Senior Specialist, Web Application Penetration Tester at KPMG US to join our Managed Services practice.

As a Senior Specialist, you will conduct manual application penetration testing across APIs, web, mobile and thick‑client applications, perform threat modeling, review application logic, and demonstrate testing expertise to internal and external audiences. You will work independently with minimal oversight, upholding integrity and professionalism.

• Conduct manual application penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Perform objective‑based penetration testing engagements.
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews.
• Demonstrate application testing experience in real‑time demos to both internal and external audiences.
• Function independently with minimal oversight and guidance.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG’s respectful and courteous work environment.

• Minimum three years of recent experience in application penetration testing of APIs, web applications, or mobile applications.
• Bachelor’s degree from an accredited college/university or equivalent industry experience.
• Ability to communicate reporting results with technical and non‑technical audiences and lead remediation conversations.
• Experience with Burp Suite Pro and other application testing tools such as Netsparker and Checkmarx.
• One or more major ethical hacking certifications preferred (e.g., GWAPT, CREST, OSWE, OSWA).
• Ability to travel as required.
• Must be authorized to work in the U.S. without requiring employment‑based visa sponsorship.

• Seniority level:
  Mid‑Senior level
• Employment type:
  
  Full‑time
• Job function:
  Consulting

Benefits: KPMG offers a competitive benefits package, including medical, dental, vision, disability and life insurance, 401(k) plans, and personal well‑being benefits. Personal time off, holidays and breaks are provided according to your work classification.

KPMG is an equal‑opportunity employer. KPMG complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable laws.

Referrals increase your chances of interviewing at KPMG US by 2x.

To view salary ranges and additional details, visit