Senior Specialist, MAST Application Penetration Tester

KPMG is seeking a Senior Specialist, MAST Application Penetration Tester to join the Managed Services practice. Responsibilities Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications Perform objective based on abstract penetration testing engagements Execute threat modeling, evaluate application business logic, and perform application architecture reviews Demonstrate application testing experience in real time via demos to both internal and external audiences Function independently in penetration testing engagements, with minimal oversight and guidance Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment Qualifications Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications Bachelor's degree from an accredited college/university or equivalent industry experience Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Ability to travel as required Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa) Equal Opportunity Employer KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. No phone calls or agencies please. #J-18808-Ljbffr