They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms. Responsibilities ...
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms. Responsibilities ...
Jnr. Penetration Tester - Cloud, Mobile & Web Application
California, MO · On-site
$80 - $132/hr
Cloud, Mobile and Web Application Penetration Tester in Orange County, CA. This is an onsite position (hybrid is possible) for US Citizens and Green Card holders. If you need visa sponsorship now or ...
Jnr. Penetration Tester - Cloud, Mobile & Web Application
California, MO · On-site
$80 - $132/hr
Cloud, Mobile and Web Application Penetration Tester in Orange County, CA. This is an onsite position (hybrid is possible) for US Citizens and Green Card holders. If you need visa sponsorship now or ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Minimum of 2-3 years of work experience in application penetration testing * Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus)
Quick apply
Minimum of 2-3 years of work experience in application penetration testing * Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus)
Minimum of 2-3 years of work experience in application penetration testing * Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus)
Minimum of 2-3 years of work experience in application penetration testing * Familiarity with offensive tools, based on applicable skillset (e.g., Kali Linux, Burp Suite, Metasploit, Nessus)
Penetration Tester
Aurora, CO · On-site
Citizenship) Preferred : • Familiarity with social engineering techniques • Knowledge of mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure ...
Penetration Tester
Aurora, CO · On-site
Citizenship) Preferred : • Familiarity with social engineering techniques • Knowledge of mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure ...
Penetration Tester
Aurora, CO · On-site
Citizenship) Preferred : • Familiarity with social engineering techniques • Knowledge of mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure ...
Penetration Tester
Aurora, CO · On-site
Citizenship) Preferred : • Familiarity with social engineering techniques • Knowledge of mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure ...
Penetration Tester
Reston, VA · On-site
... mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure) • Expertise in reverse engineering and malware analysis • Understanding of advanced ...
Penetration Tester
Reston, VA · On-site
... mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure) • Expertise in reverse engineering and malware analysis • Understanding of advanced ...
Penetration Tester
Chantilly, VA · On-site
... mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure) • Expertise in reverse engineering and malware analysis • Understanding of advanced ...
Penetration Tester
Chantilly, VA · On-site
... mobile application penetration testing • Experience with cloud security assessments (e.g., AWS, Azure) • Expertise in reverse engineering and malware analysis • Understanding of advanced ...
Penetration Tester
Portland, OR · On-site
$90 - $130/hr
Conduct standard web application penetration testing and support advanced application testing based ... on entry-level offensive security certificationA junior-level certification alone does not ...
Penetration Tester
Portland, OR · On-site
$90 - $130/hr
Conduct standard web application penetration testing and support advanced application testing based ... on entry-level offensive security certificationA junior-level certification alone does not ...
Penetration Tester
$87K - $157K/yr
Proven experience with web application penetration testing, including OWASP Top 10 vulnerabilities * Experience conducting cloud security assessments (AWS, Azure, GCP) and cloud-native penetration ...
Penetration Tester
$87K - $157K/yr
Proven experience with web application penetration testing, including OWASP Top 10 vulnerabilities * Experience conducting cloud security assessments (AWS, Azure, GCP) and cloud-native penetration ...
Penetration Tester
Huntsville, AL · On-site
$87K - $157K/yr
Proven experience with web application penetration testing, including OWASP Top 10 vulnerabilities * Experience conducting cloud security assessments (AWS, Azure, GCP) and cloud-native penetration ...
Penetration Tester
Huntsville, AL · On-site
$87K - $157K/yr
Proven experience with web application penetration testing, including OWASP Top 10 vulnerabilities * Experience conducting cloud security assessments (AWS, Azure, GCP) and cloud-native penetration ...
Penetration Tester
Reston, VA · On-site
Penetration Tester Location: Reston, VA Work Mode - Hybrid role, 2 days' Work from Office ... Experience conducting web application security assessments * Experience working with a range of ...
Penetration Tester
Reston, VA · On-site
Penetration Tester Location: Reston, VA Work Mode - Hybrid role, 2 days' Work from Office ... Experience conducting web application security assessments * Experience working with a range of ...
Penetration Tester
Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Penetration Tester
Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Penetration Tester
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on limitations ...
Penetration Tester
Chantilly, VA · On-site
... Penetration Tester to perform computer network evaluations and penetration security assessments ... application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on limitations ...
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Quick apply
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Quick apply
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
This entry-level role focuses on internal and external network penetration testing. You'll work ... and application discovery, credential attacks, and exploitation of exposed services within an ...
This entry-level role focuses on internal and external network penetration testing. You'll work ... and application discovery, credential attacks, and exploitation of exposed services within an ...
Entry Level Application Penetration Tester information
See salary details
$96.5K - $102.2K
4% of jobs
$102.2K - $108K
8% of jobs
$108K - $113.7K
4% of jobs
$113.7K - $119.4K
2% of jobs
$121.8K is the 25th percentile. Wages below this are outliers.
$119.4K - $125.1K
16% of jobs
$125.1K - $130.9K
15% of jobs
The median wage is $131.2K / yr.
$130.9K - $136.6K
11% of jobs
$136.6K - $142.3K
10% of jobs
$145.3K is the 75th percentile. Wages above this are outliers.
$142.3K - $148K
10% of jobs
$148K - $153.8K
11% of jobs
$153.8K - $159.5K
10% of jobs
$96.5K
$132.3K
$159.5K
How much do entry level application penetration tester jobs pay per year?
As of Sep 5, 2026, the average yearly pay for entry level application penetration tester in the United States is $132,307.00, according to ZipRecruiter salary data. Most workers in this role earn between $121,500.00 and $146,500.00 per year, depending on experience, location, and employer.
What is the difference between Entry Level Application Penetration Tester vs Security Analyst?
| Aspect | Entry Level Application Penetration Tester | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CEH (Certified Ethical Hacker) | CompTIA Security+, CISSP (entry-level roles) |
| Work Environment | Hands-on testing, simulated attacks, vulnerability assessments | Monitoring security systems, analyzing threats, incident response |
| Employer & Industry Usage | Cybersecurity firms, tech companies, government agencies | Financial institutions, healthcare, corporate security teams |
Entry Level Application Penetration Testers focus on identifying vulnerabilities in applications through simulated attacks, requiring technical skills and certifications like CEH. Security Analysts monitor and analyze security systems to detect threats, often with similar certifications but a broader focus on security operations. Both roles are essential in cybersecurity but differ in daily tasks and focus areas.
More about Entry Level Application Penetration Tester jobs
What cities are hiring for Entry Level Application Penetration Tester jobs?
Cities with the most Entry Level Application Penetration Tester job openings:
What are the most commonly searched types of Application Penetration Tester jobs?
The most popular types of Application Penetration Tester jobs are:
What states have the most Entry Level Application Penetration Tester jobs?
States with the most job openings for Entry Level Application Penetration Tester jobs include:
What job categories do people searching Entry Level Application Penetration Tester jobs look for?
The top searched job categories for Entry Level Application Penetration Tester jobs are:
- Overnight International Penetration Tester
- Trainee International Penetration Tester
- Burp Suite Practitioner
- Ethical Penetration Testing
- Penetration Tester Red Team
- Temporary Cybersecurity Penetration Tester
- Penetration Testers
- City Penetration Testing
- Home Based Penetration Tester Red Team
- Penetration Tester Ethical Hacker Redlens Infosec
Full-time
Re-posted 6 days ago
Job description
Job Summary:
KPMG is a leading advisory firm that offers excellent opportunities for career advancement. They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading advisory firm that offers excellent opportunities for career advancement. They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.