1

Gpen Jobs in Ohio (NOW HIRING)

$69.66 - $92.88/hr

Zertifizierungen wie eJPT, OSCP, HTB CPTS, GPEN, GRTP oder CRTO/CRTLO sind ein Plus* Erfahrung als Blue Teamer resp. SOC-Analyst sind von Vorteil**Basics, die das Leben noch besser machen*** Deine ...

New

Gpen information

See Ohio salary details

$4

$81

$89

How much do gpen jobs pay per hour?

As of Aug 21, 2026, the average hourly pay for gpen in Ohio is $81.03, according to ZipRecruiter salary data. Most workers in this role earn between $86.36 and $88.56 per hour, depending on experience, location, and employer.

What is a gpen?

A GPEN job typically involves professionals who have earned the GIAC Penetration Tester (GPEN) certification. These individuals specialize in ethical hacking and penetration testing, assessing the security of networks, applications, and systems. Their responsibilities include identifying vulnerabilities, conducting security assessments, and providing recommendations to strengthen cybersecurity defenses. GPEN-certified professionals often work for cybersecurity firms, government agencies, or large enterprises to help protect sensitive data from cyber threats.

What does a typical day look like for someone working as a GPEN-certified penetration tester?

A typical day for a GPEN-certified penetration tester often involves planning and executing simulated cyberattacks on IT systems to uncover vulnerabilities. This includes researching targets, using various tools to test defenses, documenting findings, and preparing detailed reports for clients or internal stakeholders. Penetration testers frequently collaborate with IT teams to discuss risks and recommend remediation strategies, and may also be involved in debrief meetings or security training sessions. The work environment is usually fast-paced and project-based, with a balance of independent technical work and teamwork to address complex security challenges.

What are the key skills and qualifications needed to thrive in the gpen position, and why are they important?

A GPEN (GIAC Penetration Tester) thrives with a strong background in cybersecurity, network protocols, and ethical hacking, commonly supported by a relevant IT degree and the GIAC GPEN certification. Familiarity with penetration testing tools such as Metasploit, Burp Suite, and vulnerability scanners is crucial, along with proficiency in scripting languages. Strong analytical thinking, attention to detail, and effective written and verbal communication skills set candidates apart in this role. These competencies are important for identifying vulnerabilities, clearly reporting findings, and helping organizations strengthen their security posture.

Infographic showing various Gpen job openings in Ohio as of August 2026, with employment types broken down into 80% Full Time, 6% Part Time, and 14% Contract. Highlights an 80% In-person, 6% Hybrid, and 14% Remote job distribution, with an average salary of $168,533 per year, or $81 per hour.

Senior Associate, Application Security, DevSecOps

Kpmg India

Columbus, OH • On-site

Other

Posted 10 days ago


Job description

Senior Associate, Application Security, DevSecOps

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team.

KPMG is currently seeking a Senior Associate, Application Security, DevSecOps to join our Enterprise Security Services organization.

Responsibilities:
  • Maintain awareness of the AI application security threat landscape, including risks such as data leakage, prompt injection, insecure agent actions, IP exposure, and AI supply-chain/plugin risks to support the development and maintenance of AI AppSec standards, baselines, and guardrails
  • Perform hands-on security evaluations of AI-enabled development tools, including review of architectures, data flows, configurations, integrations, and operational models while assessing AI tool security controls related to data usage, model training restrictions, identity and access, logging, DLP, sandboxing, and third-party integrations
  • Execute standardized AppSec control checklists and evaluation criteria for AI tools and use cases, ensuring consistent and repeatable assessments
  • Document evaluation outcomes, including identified risks, required controls, remediation actions, and residual risk or exception recommendations and present evaluation findings and risk summaries to AppSec leadership and relevant stakeholders
  • Develop automations to support metrics collection, and automated testing capabilities to support security evaluations related to AI tools, and any other AppSec related use cases while assisting in building and maintaining metrics, dashboards, and inventories related to AI tool evaluations, approvals, and exceptions
  • Provide security guidance to developers and platform teams on recommended controls and compensating measures for AI tools and work with development and platform teams to validate remediation activities and confirm required security configurations are implemented
  • Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
  • Minimum four years of recent experience in application security, DevSecOps practices, or secure software engineering, including a solid understanding of DevOps concepts, CI/CD pipelines, and security integration
  • Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required; the following certifications: GWAPT, GPEN, CEH, GWEB, CISSP, CISM, or equivalent or preferred
  • Practical application development experience with programming and scripting proficiency in languages such as Java, C#, JavaScript, Python, and SQL
  • Strong understanding of core application security principles, security controls, and risk assessment, with proven experience conducting security testing, architecture reviews, and threat modeling; deep knowledge of common and emerging security risks, including the OWASP Top 10, alongside specialized familiarity with AI-specific AppSec threats such as prompt injection, data leakage, and IP protection
  • Working knowledge of secure software development methodologies and application security tools, including static (SAST) and dynamic (DAST) analysis, combined with moderate hands-on knowledge of cloud technologies and secure cloud application design, with a preference for Azure
  • Strong written and verbal English communication skills, with the ability to clearly explain complex technical risks, findings, and practical remediation guidance to diverse audiences, with experience with large global multi-culture environments
  • Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)