... testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client ... app testing tools such as Netsparker and Checkmarx • Ability to travel as required • Must be ...
... testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client ... app testing tools such as Netsparker and Checkmarx • Ability to travel as required • Must be ...
... testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client ... app testing tools such as Netsparker and Checkmarx • Ability to travel as required • Must be ...
... testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client ... app testing tools such as Netsparker and Checkmarx • Ability to travel as required • Must be ...
Responsibilities : • Execute scoped penetration testing tasks under supervision across: • External and internal network assessments • Web application and API testing • Entry-level cloud ...
Responsibilities : • Execute scoped penetration testing tasks under supervision across: • External and internal network assessments • Web application and API testing • Entry-level cloud ...
Penetration Tester
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Penetration Tester
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Penetration Tester
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Penetration Tester
Quantico, VA · Hybrid
Proven experience conducting penetration tests of web applications, networks, and other systems. * Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ...
Expert Penetration Tester
Dallas, TX · On-site
Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto ...
Expert Penetration Tester
Dallas, TX · On-site
Penetration Testing Experience with operating systems, web applications and network infrastructure. Experience with using Penetration Testing Tools. e.g. NMap, Nessus, Metasploit, BurpSuite, Nikto ...
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Quick apply
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Penetration Tester
Reston, VA · On-site
Network penetration testing and experience working with network infrastructure * An understanding ... Experience conducting web application security assessments * Experience working with a range of ...
Penetration Tester
Reston, VA · On-site
Network penetration testing and experience working with network infrastructure * An understanding ... Experience conducting web application security assessments * Experience working with a range of ...
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
Quick apply
Be Seen First
Penetration Tester
Knoxville, TN · Remote
$120K - $145K/yr
This role requires proven hands-on capability in both network and web application/API penetration testing. You'll combine manual analysis with appropriate tooling, identify and pursue viable attack ...
NetSPI ® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern ... As a Penetration Tester supporting web applications, you will work closely with clients to deliver ...
Quick apply
NetSPI ® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern ... As a Penetration Tester supporting web applications, you will work closely with clients to deliver ...
NetSPI ® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern ... As a Penetration Tester supporting web applications, you will work closely with clients to deliver ...
NetSPI ® pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modern ... As a Penetration Tester supporting web applications, you will work closely with clients to deliver ...
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Quick apply
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Penetration Tester, Web/Mobile Apps and Cloud Services
Irvine, CA · On-site
$80K - $132K/yr
Penetration Testing: Perform penetration testing on cloud services, web applications, and APIs to identify vulnerabilities. Provide remediation recommendations and write detailed penetration test ...
Penetration Tester
Chantilly, VA · On-site
... penetration testing. • Have an understanding of and interest in common web application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on limitations, etc. • Must be ...
Penetration Tester
Chantilly, VA · On-site
... penetration testing. • Have an understanding of and interest in common web application vulnerabilities like XSS, CSRF, Command Injection, SQLi, single sign-on limitations, etc. • Must be ...
Penetration Tester
Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Penetration Tester
Beltsville, MD · On-site
$60 - $70/hr
Network & Web Application Testing: * Ability to identify and exploit vulnerabilities in networks ... GPEN (GIAC Penetration Tester) * CPT (Certified Penetration Tester) Soft Skills * Strong report ...
Manual Penetration Tester
Alpharetta, GA · On-site
Responsibilities : • Perform advanced manual penetration testing of web applications, APIs, thick clients, mobile applications (iOS/Android), etc. • Identify, validate, and exploit security ...
Manual Penetration Tester
Alpharetta, GA · On-site
Responsibilities : • Perform advanced manual penetration testing of web applications, APIs, thick clients, mobile applications (iOS/Android), etc. • Identify, validate, and exploit security ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx * One ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx * One ...
This entry-level role focuses on internal and external network penetration testing. You'll work ... cloud or web application testing Netrio is a leading MSP in North America, specializing in ...
This entry-level role focuses on internal and external network penetration testing. You'll work ... cloud or web application testing Netrio is a leading MSP in North America, specializing in ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx * One ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx * One ...
Entry Level Web App Penetration Testing information
See salary details
$11.54 - $18.36
4% of jobs
$18.36 - $25.17
0% of jobs
$25.17 - $31.99
0% of jobs
$31.99 - $38.81
6% of jobs
$38.81 - $45.63
5% of jobs
$50.89 is the 25th percentile. Wages below this are outliers.
$45.63 - $52.45
12% of jobs
The median wage is $59.11 / hr.
$52.45 - $59.27
23% of jobs
$65.74 is the 75th percentile. Wages above this are outliers.
$59.27 - $66.08
26% of jobs
$66.08 - $72.90
13% of jobs
$72.90 - $79.72
3% of jobs
$79.72 - $86.54
7% of jobs
$11
$59
$86
How much do entry level web app penetration testing jobs pay per hour?
As of Sep 1, 2026, the average hourly pay for entry level web app penetration testing in the United States is $59.01, according to ZipRecruiter salary data. Most workers in this role earn between $51.20 and $66.83 per hour, depending on experience, location, and employer.
What is the difference between Entry Level Web App Penetration Testing vs Web Developer?
| Aspect | Entry Level Web App Penetration Testing | Web Developer |
|---|---|---|
| Certifications | CompTIA Security+, CEH (optional) | None required, but coding certifications help |
| Work Environment | Security teams, testing labs, client sites | Development teams, office or remote |
| Primary Focus | Identifying security vulnerabilities in web apps | Building and maintaining websites and applications |
| Tools & Skills | Penetration testing tools, scripting, security protocols | Programming languages, frameworks, UI/UX design |
Entry Level Web App Penetration Testing focuses on assessing web app security, while Web Developers create and maintain web applications. Both roles require technical skills, but penetration testers emphasize security testing and vulnerability identification, whereas developers focus on coding and user experience.
More about Entry Level Web App Penetration Testing jobs
What cities are hiring for Entry Level Web App Penetration Testing jobs?
Cities with the most Entry Level Web App Penetration Testing job openings:
What are the most commonly searched types of Web App Penetration Testing jobs?
The most popular types of Web App Penetration Testing jobs are:
What job categories do people searching Entry Level Web App Penetration Testing jobs look for?
The top searched job categories for Entry Level Web App Penetration Testing jobs are:
Full-time
Re-posted 2 days ago
Job description
Job Summary:
KPMG is currently seeking a Senior Specialist, MAST Application Penetration Tester to join our Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while maintaining a collaborative and professional work environment.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is currently seeking a Senior Specialist, MAST Application Penetration Tester to join our Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while maintaining a collaborative and professional work environment.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.