Specialist, Security Tester

Responsibilities

• Perform automated application/network penetration tests on web applications, internal applications, APIs, internal and external networks, and mobile applications to discover and exploit vulnerabilities.
• Execute dynamic application security tests on web applications and static application security tests on source code, including identifying false positives and reprioritizing findings severity.
• Conduct vulnerability analysis against internal and external networks using automation techniques and solutions.
• Elevate to executing independently in either the application or network domain within one year of service.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

• Minimum one year of recent experience performing application and/or network penetration tests using tools such as App Scan, Nets Sparker, Acunetix, Burp Suite, OWASP ZAP, Tenable Nessus, Qualys, Kali Linux, Metasploit, or equivalent; and working with technical and non-technical audiences in reporting results and leading remediation conversations.
• Bachelor's degree from an accredited college or university (required).
• Experience in mobile application testing, manual code analysis, or static analysis using Veracode, Fortify, Sonar Qube, Checkmarx, Contrast or equivalent (preferred).
• Experience with Python, JavaScript, PHP, C/C++, SQL, or similar languages (preferred).
• One or more ethical hacking certifications preferred (e.g., CEH, GWAPT, GPEN, OSCP, OSWA).
• Ability to travel as necessary.
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG will not sponsor U.S. work visa status for this opportunity.

KPMG offers a comprehensive, competitive benefits package tailored to the needs of our employees. Benefits may include medical, dental, vision, disability and life insurance, 401(k) plans, and a robust suite of personal well‑being benefits. Compensation is based on relevant factors such as skills, job responsibilities, experience, and market considerations. Additional details about benefits can be found on the KPMG US Careers site.

KPMG is an equal opportunity employer and complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws.