Senior Specialist, MAST Penetration Tester

Overview

Senior Specialist, MAST Application Penetration Tester at KPMG US

KPMG Advisory practice is currently our fastest growing practice. We are seeing tremendous client demand. We seek adaptable, collaborative professionals who will grow with a team-driven culture and contribute to a broad set of capabilities within Advisory.

• Conduct manual application penetration testing against APIs (REST/SOAP), web applications, mobile applications, and thick client applications
• Perform objective-based testing on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG s respectful and courteous work environment

• Minimum three years of recent experience in application penetration testing of APIs, web applications, or mobile applications
• Bachelor s degree from an accredited college/university or equivalent industry experience
• Ability to communicate results to technical and non-technical audiences and lead remediation conversations
• Experience with Burp Suite Pro and other testing tools such as Netsparker and Checkmarx
• One or more major ethical hacking certifications preferred (e.g., GWAPT, CREST, OSWE, OSWE, OSWA)
• Ability to travel as required
• Must be authorized to work in the U.S. without visa sponsorship now or in the future

• Full-time

Chicago, IL (also noted eligibility for local salary ranges; see posting for details)

KPMG complies with applicable employment laws and is an equal opportunity employer. No phone calls or agencies please.