Specialist, Security Tester

Specialist, Security Tester

Apply for the Specialist, Security Tester role at KPMG US.

KPMG is currently seeking a Specialist, Security Tester to join our Advisory Services practice.

• Perform automated application / network penetration tests on web applications, internal applications, APIs, internal and external networks, and mobile applications to discover and exploit vulnerabilities.
• Execute dynamic application security tests on web applications and static application security tests on source code, including identifying false positives and reprioritizing findings severity.
• Conduct vulnerability analysis against internal and external networks leveraging automation techniques and solutions.
• Elevate to executing independently in either the application or network domain within one year of service.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment.

• Minimum one year of recent experience performing application and/or network penetration tests using tools such as App Scan, Nets Sparker, Acunetix, Burp Suite, OWASP ZAP, Tenable Nessus, Qualys, Kali Linux, Metasploit, or equivalent.
• Minimum one year of recent experience working with technical and non-technical audiences in reporting results and leading remediation conversations.
• Bachelor's degree from an accredited college or university is required.
• Experience in mobile application testing, manual code analysis, and/or static analysis using Veracode, Fortify, Sonar Qube, Checkmarx, Contrast or equivalent is a plus.
• Experience in Python, JavaScript, PHP, C/C++, SQL and related languages is a plus.
• One or more ethical hacking certifications preferred (e.g., CEH, GWAPT, GPEN, OSCP, OSWA).
• Ability to travel as necessary.

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity.

KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws.