They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct application penetration testing and work independently on engagements. Responsibilities : • Conduct manual ...
They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct application penetration testing and work independently on engagements. Responsibilities : • Conduct manual ...
The role involves conducting application penetration testing and threat modeling while ensuring a collaborative and professional work environment. Responsibilities : • Conduct manual application ...
The role involves conducting application penetration testing and threat modeling while ensuring a collaborative and professional work environment. Responsibilities : • Conduct manual application ...
They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct penetration testing and evaluate application security while fostering a collaborative team environment.
They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct penetration testing and evaluate application security while fostering a collaborative team environment.
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms. Responsibilities ...
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security across various platforms. Responsibilities ...
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security within their Managed Services practice.
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security within their Managed Services practice.
They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and execute threat modeling while working independently in various engagements.
They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and execute threat modeling while working independently in various engagements.
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to perform manual penetration testing and threat modeling, while working independently and demonstrating ...
They are currently seeking a Senior Specialist, MAST Application Penetration Tester to perform manual penetration testing and threat modeling, while working independently and demonstrating ...
Offensive Security Web Expert (OSWE) * eLearnSecurity Web Application Penetration Tester (eWPT ... Desired hourly rate or project-based pricing information
Offensive Security Web Expert (OSWE) * eLearnSecurity Web Application Penetration Tester (eWPT ... Desired hourly rate or project-based pricing information
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Jnr. Penetration Tester - Cloud, Mobile & Web Application
California, MO · On-site
$80 - $132/hr
Cloud, Mobile and Web Application Penetration Tester in Orange County, CA. This is an onsite position (hybrid is possible) for US Citizens and Green Card holders. If you need visa sponsorship now or ...
New
Jnr. Penetration Tester - Cloud, Mobile & Web Application
California, MO · On-site
$80 - $132/hr
Cloud, Mobile and Web Application Penetration Tester in Orange County, CA. This is an onsite position (hybrid is possible) for US Citizens and Green Card holders. If you need visa sponsorship now or ...
New
Senior Specialist, MAST Application Penetration Tester
Washington, DC · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Senior Specialist, MAST Application Penetration Tester
Washington, DC · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Senior Specialist, MAST Application Penetration Tester
Chicago, IL · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
Senior Specialist, MAST Application Penetration Tester
Chicago, IL · On-site
$95K - $208K/yr
Medical
Dental
Vision
Life
Retirement
PTO
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications * Perform objective based on abstract penetration ...
REQUIRED QUALIFICATIONS 5+ years of experience in security applications and systems Minimum of 5 years of Information Security Engineer/Consultant experience with application penetration testing.
REQUIRED QUALIFICATIONS 5+ years of experience in security applications and systems Minimum of 5 years of Information Security Engineer/Consultant experience with application penetration testing.
Penetration Tester III
Chandler, AZ · On-site
... Application penetration testing. • Conducting Federal and Commercial Cloud technology penetration testing. • Conducting High Value Asset Assessments. Qualifications : Required : • Bachelor ...
Penetration Tester III
Chandler, AZ · On-site
... Application penetration testing. • Conducting Federal and Commercial Cloud technology penetration testing. • Conducting High Value Asset Assessments. Qualifications : Required : • Bachelor ...
Penetration Tester II
Chandler, AZ · On-site
... Application penetration testing. • Executing High Value Asset Assessments. • Utilizing various methodologies for penetration testing. • Gathering information and conducting comprehensive ...
Penetration Tester II
Chandler, AZ · On-site
... Application penetration testing. • Executing High Value Asset Assessments. • Utilizing various methodologies for penetration testing. • Gathering information and conducting comprehensive ...
Penetration Tester
Springfield, VA · On-site
$100K - $140K/yr
Medical
Dental
Vision
Life
Retirement
PTO
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Quick apply
Penetration Tester
Springfield, VA · On-site
$100K - $140K/yr
Medical
Dental
Vision
Life
Retirement
PTO
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Penetration Tester II
Washington, DC · On-site
... Device Application penetration testing. • Execute Federal and Commercial Cloud technology penetration testing. • Conduct High Value Asset Assessments. • Utilize knowledge of Red, Blue, and ...
Penetration Tester II
Washington, DC · On-site
... Device Application penetration testing. • Execute Federal and Commercial Cloud technology penetration testing. • Conduct High Value Asset Assessments. • Utilize knowledge of Red, Blue, and ...
Penetration Tester
Charlotte, NC · On-site
... with application penetration testing. • Minimum of 5 years of demonstrated experience with automated penetration tools • Minimum of 5 years of demonstrated experience with manual penetration ...
Penetration Tester
Charlotte, NC · On-site
... with application penetration testing. • Minimum of 5 years of demonstrated experience with automated penetration tools • Minimum of 5 years of demonstrated experience with manual penetration ...
Penetration Tester II
Chandler, AZ · On-site
... Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • Knowledge of Red, Blue ...
Penetration Tester II
Chandler, AZ · On-site
... Application penetration testing. • Experience with Federal and Commercial Cloud technology penetration testing. • Experience conducting High Value Asset Assessments. • Knowledge of Red, Blue ...
Penetration Tester
Springfield, VA · On-site
$100K - $140K/yr
Medical
Dental
Vision
Life
Retirement
PTO
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Quick apply
Penetration Tester
Springfield, VA · On-site
$100K - $140K/yr
Medical
Dental
Vision
Life
Retirement
PTO
GIAC Web Application Penetration Tester (GWAP) Company Description Total Cyber Solutions is a premier provider of Government Contracting, managed IT Services, and Cybersecurity Training. We help ...
Hourly Application Penetration Tester information
See salary details
$96.5K - $102.2K
4% of jobs
$102.2K - $108K
8% of jobs
$108K - $113.7K
4% of jobs
$113.7K - $119.4K
2% of jobs
$121.8K is the 25th percentile. Wages below this are outliers.
$119.4K - $125.1K
16% of jobs
$125.1K - $130.9K
15% of jobs
The median wage is $131.2K / yr.
$130.9K - $136.6K
11% of jobs
$136.6K - $142.3K
10% of jobs
$145.3K is the 75th percentile. Wages above this are outliers.
$142.3K - $148K
10% of jobs
$148K - $153.8K
11% of jobs
$153.8K - $159.5K
10% of jobs
$96.5K
$132.3K
$159.5K
How much do hourly application penetration tester jobs pay per year?
As of Aug 20, 2026, the average yearly pay for hourly application penetration tester in the United States is $132,307.00, according to ZipRecruiter salary data. Most workers in this role earn between $121,500.00 and $146,500.00 per year, depending on experience, location, and employer.
What is the difference between Hourly Application Penetration Tester vs Security Analyst?
| Aspect | Hourly Application Penetration Tester | Security Analyst |
|---|---|---|
| Certifications | OSCP, CEH, GPEN | CISSP, Security+ |
| Work Environment | Project-based, consulting firms, freelance | In-house, corporate security teams |
| Job Focus | Identifying vulnerabilities in applications | Monitoring, analyzing security threats |
| Industry Usage | Tech, finance, healthcare | All sectors with security needs |
The Hourly Application Penetration Tester primarily focuses on testing applications for vulnerabilities on an hourly or project basis, often working as a freelancer or consultant. In contrast, a Security Analyst typically works within an organization to monitor and respond to security threats. While both roles require security certifications and knowledge of cybersecurity, their work environments and daily tasks differ significantly.
What cities are hiring for Hourly Application Penetration Tester jobs?
Cities with the most Hourly Application Penetration Tester job openings:
What are the most commonly searched types of Application Penetration Tester jobs?
The most popular types of Application Penetration Tester jobs are:
What states have the most Hourly Application Penetration Tester jobs?
States with the most job openings for Hourly Application Penetration Tester jobs include:
Full-time
Re-posted 20 days ago
Job description
Job Summary:
KPMG is a leading firm in the Advisory practice, offering opportunities for career advancement and professional development. They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct application penetration testing and work independently on engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading firm in the Advisory practice, offering opportunities for career advancement and professional development. They are seeking a Senior Specialist, MAST Application Penetration Tester to conduct application penetration testing and work independently on engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.