Application Penetration Testing Lead Specialist

KPMG's Advisory practice is experiencing rapid growth with increasing client demand. We are committed to adapting to the ever-changing market environment, fostering a collaborative and team-driven culture. At KPMG, our people are our priority. We offer extensive learning and career development opportunities, a world-class training facility, and leading market tools to ensure our professionals grow both personally and professionally. If you seek a firm that values team connection, allows you to be your authentic self, and offers you the chance to have a meaningful impact while expanding your skills, consider a career in Advisory.

KPMG is seeking an Application Penetration Testing Lead Specialist to join our Managed Services practice.
Responsibilities:
• Guide the application penetration testing teams to enhance service solutions and manage client engagements, showcasing strong technical expertise in manual application penetration testing.
• Lead client interactions, providing technical guidance, and offering insights to team members regarding application penetration testing projects.
• Encourage thought leadership and promote growth and learning within the team.
• Communicate testing processes and findings effectively to both technical and non-technical audiences, assisting in discussions on remediation options.
• Collaborate with Cyber teams to innovate testing techniques and automation, develop marketing materials, and mentor team members on tools and techniques for effective testing.
• Uphold integrity and professionalism, contributing to KPMG's respectful and courteous work environment.
Qualifications:
• A minimum of five years of recent experience in application penetration testing tools, including but not limited to AppScan, Netsparker, Acunetix, ZAP, Veracode, BurpSuite, or similar tools, as well as in leading remediation conversations with both technical and non-technical audiences.
• At least five years of recent experience in leading application security testing teams in a consulting capacity.
• A bachelor’s degree from an accredited institution or equivalent industry experience.
• Preferred certifications such as Certified Information Systems Security Professional (CISSP), GIAC Web Application Penetration Tester (GWAPT), Council of Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), or Offensive Security Web Assessor (OSWA).
• Experience in mobile application testing, code development, manual code analysis, or static analysis using tools like Veracode, Fortify, SonarQube, Checkmarx, Contrast, or equivalent is preferred.
• Willingness to travel as required.
• Authorized to work in the U.S. without needing employment-based visa sponsorship now or in the future.

KPMG offers a comprehensive benefits package including a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a suite of well-being benefits to support mental health. Eligible employees enjoy Personal Time Off and additional holidays throughout the year. For further details on our benefits, please visit the KPMG US Careers site.

KPMG is proud to be an equal opportunity employer and complies with all applicable regulations regarding recruitment and hiring.

We recruit on a rolling basis and encourage candidates to apply promptly for roles that match their qualifications.

Material job duties are outlined above, and we consider applicants with arrest and conviction records for employment related to these duties, adhering to relevant fair chance laws.