GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
AQ Cyber Network Operator
Chantilly, VA · On-site
OSCP, OSWE, GXPN, GPEN, or equivalent * Familiarity with commonly used large-scale service components (webservers, databases, load balancers, caching servers, storage cluster, etc.
AQ Cyber Network Operator
Chantilly, VA · On-site
OSCP, OSWE, GXPN, GPEN, or equivalent * Familiarity with commonly used large-scale service components (webservers, databases, load balancers, caching servers, storage cluster, etc.
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
... OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and intelligence services for government and commercial customers. Founded in ...
... OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and intelligence services for government and commercial customers. Founded in ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
Principal Senior Vulnerability Research Engineer (Onsite)
Annapolis Junction, MD · On-site
$128K - $176K/yr
Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and ...
Principal Senior Vulnerability Research Engineer (Onsite)
Annapolis Junction, MD · On-site
$128K - $176K/yr
Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
AQ Cyber Network Operator
Chantilly, VA · On-site
OSCP, OSWE, GXPN, GPEN, or equivalent • Familiarity with commonly used large-scale service components (webservers, databases, load balancers, caching servers, storage cluster, etc.) Company
AQ Cyber Network Operator
Chantilly, VA · On-site
OSCP, OSWE, GXPN, GPEN, or equivalent • Familiarity with commonly used large-scale service components (webservers, databases, load balancers, caching servers, storage cluster, etc.) Company
Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and ...
Relevant Cybersecurity Certifications (e.g. oscp, oscE, OSWP, OSEP, OSWE, OSED, OSEE, GPEN, GWAPT, GXPN, CISSP) Company : Nightwing provides cyber, data operations, systems integration, and ...
Web Developer Security Engineer
$145K - $175K/yr
CSSLP, GWEB, CASE, OSWE, OSCP, Security+, or equivalent preferred/required as applicable. Security Clearance: * Active Top Secret (TS) security clearance required. Compensation: $145,000.00 - $175 ...
Web Developer Security Engineer
$145K - $175K/yr
CSSLP, GWEB, CASE, OSWE, OSCP, Security+, or equivalent preferred/required as applicable. Security Clearance: * Active Top Secret (TS) security clearance required. Compensation: $145,000.00 - $175 ...
Experience working in consulting or client-facing environments Nice to Have Offensive security certifications such as OSCP, OSWE, OSEP, CRTO, or similar Experience performing hardware / product ...
Experience working in consulting or client-facing environments Nice to Have Offensive security certifications such as OSCP, OSWE, OSEP, CRTO, or similar Experience performing hardware / product ...
Offensive Security Engineer
Austin, TX · On-site
... OSWE, or relevant cloud certifications. Preferred : • Verifiable contributions to vulnerability research (CVEs), exploit development, or open-source offsec projects. • Familiarity with AI prompt ...
Offensive Security Engineer
Austin, TX · On-site
... OSWE, or relevant cloud certifications. Preferred : • Verifiable contributions to vulnerability research (CVEs), exploit development, or open-source offsec projects. • Familiarity with AI prompt ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA) Company : KPMG ...
Web Developer Security Engineer
Washington, DC · On-site
$100 - $120/hr
OSWE * OSCP Foundational Security (One Required): * Security+ * GSEC Preferred Qualifications * Experience securing federal government applications and systems. * Experience integrating security ...
Web Developer Security Engineer
Washington, DC · On-site
$100 - $120/hr
OSWE * OSCP Foundational Security (One Required): * Security+ * GSEC Preferred Qualifications * Experience securing federal government applications and systems. * Experience integrating security ...
OSWE information
See salary details
$73.5K - $83.8K
1% of jobs
$83.8K - $94K
4% of jobs
$94K - $104.3K
8% of jobs
$114.6K is the 25th percentile. Wages below this are outliers.
$104.3K - $114.6K
11% of jobs
$114.6K - $124.9K
13% of jobs
The median wage is $132.6K / yr.
$124.9K - $135.1K
17% of jobs
$135.1K - $145.4K
11% of jobs
$153.8K is the 75th percentile. Wages above this are outliers.
$145.4K - $155.7K
11% of jobs
$155.7K - $166K
9% of jobs
$166K - $176.2K
7% of jobs
$176.2K - $186.5K
6% of jobs
$73.5K
$137.1K
$186.5K
How much do oswe jobs pay per year?
What is an OSWE?
An OSWE (Offensive Security Web Expert) job involves conducting advanced web application penetration testing to identify security vulnerabilities. Professionals with this certification specialize in exploiting complex web applications, analyzing security risks, and providing remediation guidance. OSWE-certified individuals typically work as penetration testers, security consultants, or ethical hackers, ensuring web applications are secure against real-world attacks.
What are the key skills and qualifications needed to thrive as an OSWE?
To thrive as an OSWE (Offensive Security Web Expert), you need strong expertise in web application security, penetration testing, and vulnerability assessment, usually supported by advanced technical training or industry certifications such as the OSWE. Familiarity with tools like Burp Suite, various proxy tools, scripting languages (such as Python and JavaScript), and security testing platforms is essential. Persistence, analytical thinking, and clear communication skills make a candidate stand out in this security-focused role. These abilities are critical to effectively identifying, reporting, and helping mitigate security weaknesses in web applications, ensuring organizations’ digital safety.
What types of projects or assessments does an OSWE typically work on?
An OSWE (Offensive Security Web Expert) is primarily engaged in hands-on security assessments of web applications, focusing on identifying and exploiting vulnerabilities through advanced penetration testing techniques. Daily tasks often include reviewing source code, conducting manual and automated testing, and producing detailed vulnerability reports for development teams. OSWE professionals commonly collaborate with software developers, security engineers, and IT managers to remediate discovered issues and improve application security. This role is both challenging and rewarding, offering opportunities to tackle complex security problems and continuously expand technical skillsets through real-world scenario testing.
What are the most commonly searched types of Oswe jobs?
The most popular types of Oswe jobs are:
What states have the most Oswe jobs?
States with the most job openings for Oswe jobs include:
What job categories do people searching Oswe jobs look for?
The top searched job categories for Oswe jobs are:

Full-time
Re-posted 16 days ago
Job description
KPMG is a leading advisory firm that offers excellent opportunities for career advancement. They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security, while working independently and collaborating with both internal and external audiences.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.