Senior Specialist, MAST Application Penetration Tester
KPMG US · Portland, OR · 2 mo ago
HybridConsultingFull-time
Responsibilities
- Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
- Perform objective based on abstract penetration testing engagements
- Execute threat modeling, evaluate application business logic, and perform application architecture reviews
- Demonstrate application testing experience in real time via demos to both internal and external audiences
- Function independently in penetration testing engagements, with minimal oversight and guidance
- Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Requirements
- Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
- Bachelor's degree from an accredited college/university or equivalent industry experience
- Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
- Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
- One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Qualifications
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Skills
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Benefits
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Pay
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Schedule
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)