KPMG's Advisory practice is experiencing rapid growth, and we are excited to meet the increasing client demand. In this dynamic market, our professionals need to be adaptable and thrive in a team-oriented culture. At KPMG, we prioritize our people and offer extensive learning and career development opportunities. Our world-class training facility and cutting-edge market tools ensure that our team members continue to grow both professionally and personally. If you seek a firm where you can be your authentic self, make an impact, enhance your skill set, and explore new areas of inspiration, consider a rewarding career in Advisory.
We are currently seeking a Senior Web Application Penetration Testing Specialist to join our Managed Services practice.
Responsibilities:
• Perform manual application penetration testing on APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Conduct objective-based penetration testing engagements.
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews.
• Demonstrate real-time application testing experience through presentations to both internal and external audiences.
• Work independently in penetration testing engagements with minimal oversight.
• Uphold KPMG's standards of integrity, professionalism, and responsibility in all interactions.
Qualifications:
• A minimum of three years of recent experience in application penetration testing for APIs, web applications, or mobile applications.
• Bachelor's degree from an accredited institution or equivalent industry experience.
• Excellent communication skills to convey results to both technical and non-technical audiences and lead remediation discussions.
• Experience with Burp Suite Pro and other application testing tools such as Netsparker and Checkmarx.
• Preferred but not required: one or more major ethical hacking certifications such as GIAC Web Application Penetration Tester (GWAPT), CREST, Offensive Security Web Expert (OSWE), or Offensive Security Web Assessor (OSWA).
• Willingness to travel as necessary.
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
KPMG offers a comprehensive benefits package, including various medical and dental plans, vision coverage, life insurance, 401(k) plans, and wellness benefits. Personal Time Off is provided per fiscal year, along with specific holiday breaks. Detailed benefits information can be found on the KPMG US Careers site.
KPMG is an equal opportunity employer and complies with all recruitment and hiring laws. We encourage candidates to apply promptly as we consider applicants on a rolling basis until the position is filled.
Los Angeles County applicants: Job duties for this position are outlined above. Criminal history may impact job qualifications related to the responsibilities stated. We will consider qualified applicants with arrest and conviction records in compliance with the applicable laws.
