ZipRecruiter

Log In

1

Ethical Penetration Testing Jobs in Ohio (NOW HIRING)

Rogue Fitness

Senior Cybersecurity Engineer

Columbus, OH · On-site

$110K - $151K/yr

Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ... Background in ethical hacking, application security, digital forensics, or OSINT * Familiarity with ...

Rogue Fitness

Senior Cybersecurity Engineer

Columbus, OH · On-site

$110K - $151K/yr

Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ... Background in ethical hacking, application security, digital forensics, or OSINT * Familiarity with ...

Rogue Fitness

Senior Cybersecurity Engineer

Columbus, OH · On-site

$120 - $180/hr

Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ... Background in ethical hacking, application security, digital forensics, or OSINT* Familiarity with ...

All JobsEthical Penetration Testing JobsEthical Penetration Testing Jobs in Ohio

Ethical Penetration Testing information

What is ethical penetration testing?

Ethical penetration testing, also known as ethical hacking, is the practice of simulating cyberattacks on a computer system, network, or application with the permission of its owner. The goal is to identify security vulnerabilities before malicious hackers can exploit them. Ethical penetration testers use the same tools and techniques as cybercriminals but report findings so they can be fixed, helping organizations strengthen their security. This process is a critical part of a comprehensive cybersecurity program and helps ensure compliance with industry regulations.

What are the key skills and qualifications needed to thrive as an ethical penetration tester?

To thrive as an Ethical Penetration Tester, you need strong knowledge of network security, operating systems, and common vulnerabilities, typically backed by a degree in computer science or cybersecurity and relevant certifications like CEH or OSCP. Familiarity with tools such as Metasploit, Burp Suite, and Nmap is essential for simulating and assessing security threats. Critical thinking, problem-solving, and effective communication are key soft skills for identifying risks and clearly reporting findings to technical and non-technical stakeholders. These competencies ensure that security assessments are thorough, actionable, and help organizations strengthen their defenses against real-world cyber threats.

What are some common challenges faced by ethical penetration testers during client engagements?

Ethical penetration testers often encounter challenges such as limited timeframes to conduct thorough assessments, incomplete or ambiguous scope definitions from clients, and the need to balance effective testing with minimal disruption to live systems. Communication is key—testers must clearly report findings and collaborate with IT teams to remediate vulnerabilities. Additionally, staying current with emerging threats and tools is essential to deliver valuable insights and maintain industry standards.

What is the difference between Ethical Penetration Testing vs Vulnerability Analyst?

AspectEthical Penetration TestingVulnerability Analyst
CertificationsOSCP, CEH, GPENCompTIA Security+, CISSP, CEH
Work EnvironmentSimulated attacks on systems to identify security gapsAnalyzing vulnerabilities and assessing risk levels
Industry UsageSecurity firms, IT departments, consultingSecurity teams, risk management, compliance

Ethical Penetration Testers actively simulate cyberattacks to find exploitable weaknesses, while Vulnerability Analysts focus on identifying and prioritizing security flaws through assessments. Both roles require similar certifications and often work within the same industry sectors, but their core activities differ: testing versus analysis.

What are popular job titles related to Ethical Penetration Testing jobs in Ohio?

For Ethical Penetration Testing jobs in Ohio, the most frequently searched job titles are:

What job categories do people searching Ethical Penetration Testing jobs in Ohio look for?

The top searched job categories for Ethical Penetration Testing jobs in Ohio are:

What cities in Ohio are hiring for Ethical Penetration Testing jobs?

Cities in Ohio with the most Ethical Penetration Testing job openings:

Ethical Penetration Testing jobs near you

Senior Specialist, MAST Application Penetration Tester

KPMG US

Cleveland, OH • On-site

Full-time

Re-posted 25 days ago

Job description

Job Summary:
KPMG US is a leading advisory firm that offers opportunities for career advancement and expertise development. They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security, while fostering a collaborative and professional environment.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.

Apply