Verified Job
IT / Software / Data Analyst
Senior Application Security Specialist
IT / Software / Data Analyst
#704611
Remote / WFH
Job Description
The KPMG Advisory practice leads in transformative solutions, offering exceptional opportunities for individuals seeking to enhance their careers and expertise with KPMG. We foresee ongoing evolution and success within our practice, nurturing personal and professional growth and establishing new avenues for advancement. In this dynamic market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, we prioritize our people, providing extensive learning and career development opportunities, state-of-the-art training facilities, and leading market tools to support both professional and personal growth. If you're looking for a firm that values team connections and allows you to express your full self, make an impact, advance your skills, broaden your experiences, and find continual inspiration, consider a career in Advisory.
KPMG is actively seeking a Senior Application Security Specialist to join our Managed Services practice.
Responsibilities:
• Conduct thorough manual penetration testing on APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Perform objective-based penetration testing engagements to meet specific requirements.
• Execute threat modeling assessments, evaluate application business logic, and assess application architecture.
• Showcase your application testing experience in real-time demonstrations for both internal and external stakeholders.
• Work independently on penetration testing engagements, with minimal oversight.
• Uphold KPMG's standards of integrity, professionalism, and personal responsibility to maintain a respectful and courteous work environment.
Qualifications:
• At least three years of recent experience in application penetration testing for APIs, web applications, or mobile applications.
• Bachelor's degree from an accredited college/university or equivalent industry experience.
• Proficient in communicating test results to both technical and non-technical audiences and leading discussions on remediation strategies.
• Experience using Burp Suite Pro and other application testing tools like Netsparker and Checkmarx.
• One or more major ethical hacking certifications are preferred but not mandatory; examples include GIAC Web Application Penetration Tester (GWAPT), CREST, Offensive Security Web Expert (OSWE), or Offensive Security Web Assessor (OSWA).
• Willingness to travel as needed.
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
KPMG LLP offers a competitive compensation and benefits package, promoting a healthy work-life balance. Available benefits include medical and dental plans, vision coverage, disability and life insurance, a 401(k) plan, and comprehensive well-being resources. In addition, KPMG provides Personal Time Off annually and designated holiday breaks for eligible employees. For those interested in further details about benefits, please refer to the KPMG US Careers site.
Candidates are encouraged to apply promptly to opportunities of interest, as KPMG recruits on a rolling basis.
Please note: Material job duties for this position are outlined above. Criminal history may negatively impact some job duties, including adherence to company policies and fostering a safe and respectful work environment. Pursuant to the California Fair Chance Act and other applicable ordinances, we will consider qualified applicants with arrest and conviction records.
KPMG is actively seeking a Senior Application Security Specialist to join our Managed Services practice.
Responsibilities:
• Conduct thorough manual penetration testing on APIs (REST/SOAP), web applications, mobile applications, and thick client applications.
• Perform objective-based penetration testing engagements to meet specific requirements.
• Execute threat modeling assessments, evaluate application business logic, and assess application architecture.
• Showcase your application testing experience in real-time demonstrations for both internal and external stakeholders.
• Work independently on penetration testing engagements, with minimal oversight.
• Uphold KPMG's standards of integrity, professionalism, and personal responsibility to maintain a respectful and courteous work environment.
Qualifications:
• At least three years of recent experience in application penetration testing for APIs, web applications, or mobile applications.
• Bachelor's degree from an accredited college/university or equivalent industry experience.
• Proficient in communicating test results to both technical and non-technical audiences and leading discussions on remediation strategies.
• Experience using Burp Suite Pro and other application testing tools like Netsparker and Checkmarx.
• One or more major ethical hacking certifications are preferred but not mandatory; examples include GIAC Web Application Penetration Tester (GWAPT), CREST, Offensive Security Web Expert (OSWE), or Offensive Security Web Assessor (OSWA).
• Willingness to travel as needed.
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
KPMG LLP offers a competitive compensation and benefits package, promoting a healthy work-life balance. Available benefits include medical and dental plans, vision coverage, disability and life insurance, a 401(k) plan, and comprehensive well-being resources. In addition, KPMG provides Personal Time Off annually and designated holiday breaks for eligible employees. For those interested in further details about benefits, please refer to the KPMG US Careers site.
Candidates are encouraged to apply promptly to opportunities of interest, as KPMG recruits on a rolling basis.
Please note: Material job duties for this position are outlined above. Criminal history may negatively impact some job duties, including adherence to company policies and fostering a safe and respectful work environment. Pursuant to the California Fair Chance Act and other applicable ordinances, we will consider qualified applicants with arrest and conviction records.
