Senior Specialist, MAST Application Penetration Tester

KPMG is looking for a Senior Specialist in MAST Application Penetration Testing to steer manual security testing across APIs, Web, Mobile, and thick-client applications from their Atlanta, Georgia area. This role lives within the Managed Services practice, delivering risk-informed findings to both technical and non-technical stakeholders and conducting threat modeling and architecture reviews with a focus on independent, disciplined execution.

Location

Atlanta, GA (onsite)

Compensation

USD 95,855 - 208,265 per year

Responsibilities

• Conduct manual application penetration testing against APIs (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Requirements

• Minimum three years of recent experience in application penetration testing of API's, web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• GIAC Web Application Penetration Tester (GWAPT)
• Council for Registered Ethical Security Testers (CREST)
• Offensive Security Web Expert (OSWE)
• Offensive Security Web Assessor (OSWA)
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

Technologies

• Burp Suite Pro
• Netsparker
• Checkmarx

Benefits

• Medical and dental plans
• Vision coverage
• Disability and life insurance
• 401(k) plans
• Personal well-being benefits to support mental health
• Personal Time Off
• Holidays observed
• Two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday