ZipRecruiter

Log In

1

Penetration Tester Jobs in Michigan (NOW HIRING)

General Motors

Manager, Offensive Security

Warren, MI · On-site

$104K - $140K/yr

Lead and develop a team responsible for penetration testing, adversary emulation, responsible disclosure triage, and verification of security controls across applications, platforms, and services.

General Motors

Manager, Offensive Security

Warren, MI · On-site

$104K - $140K/yr

Lead and develop a team responsible for penetration testing, adversary emulation, responsible disclosure triage, and verification of security controls across applications, platforms, and services.

PRAB, Inc.

IT SUPPORT SPECIALIST

Kalamazoo, MI · On-site

Coordinate with third-party vendors conducting penetration testing. * Assist with tracking and resolving findings identified during penetration tests and security assessments. * Maintain ...

Crowe LLP

Offensive Security Manager

Grand Rapids, MI

$106K - $144K/yr

Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, application controls, security ...

next page

Showing results 1-20

All JobsPenetration Tester JobsPenetration Tester Jobs in Michigan

Penetration Tester information

See Michigan salary details

$19.6K

$104.5K

$146.9K

How much do penetration tester jobs pay per year?

As of Sep 4, 2026, the average yearly pay for penetration tester in Michigan is $104,500.00, according to ZipRecruiter salary data. Most workers in this role earn between $83,700.00 and $122,900.00 per year, depending on experience, location, and employer.

What is a penetration tester?

Penetration Testers, also known as ethical hackers, are cybersecurity professionals who simulate cyberattacks on computer systems, networks, or applications to identify and address security vulnerabilities. Their work helps organizations discover weak points before malicious hackers can exploit them. Penetration testers use a variety of tools and techniques to mimic real-world threats and provide detailed reports with recommendations for improving security. They play a crucial role in maintaining the safety and integrity of an organization’s digital assets.

What does a penetration tester do?

As a penetration tester, your job is to test the security of a network by attempting to hack into an application, system, or computer. Penetration testing can occur in a variety of ways, from physical interaction with the machine you’re trying to hack to attacks sent over the web. Aside from helping clients test for vulnerabilities, your job also includes explaining how you got in and providing recommendations for stopping others from repeating your actions. In some cases, you may be asked to help investigate cyber crimes or explain methods and techniques in criminal trials. Success in this job is often measured by how many security holes you find and close.

What are the key skills and qualifications needed to thrive as a penetration tester, and why are they important?

To thrive as a Penetration Tester, you need a solid understanding of networking, operating systems, cybersecurity principles, and typically hold certifications like OSCP or CEH. Proficiency with tools such as Metasploit, Burp Suite, Nmap, and Wireshark is crucial for identifying and exploiting vulnerabilities. Strong analytical thinking, attention to detail, and clear communication skills help Penetration Testers effectively document findings and convey risks to clients. These skills and qualities are vital for uncovering security weaknesses and helping organizations strengthen their defenses against cyber threats.

What are some common challenges penetration testers face during client engagements?

Penetration testers often encounter challenges such as limited access to information, strict time constraints, and navigating complex or legacy systems. Additionally, they must balance thorough testing with minimizing disruptions to client operations. Effective communication is crucial, as testers need to clearly document findings and explain technical vulnerabilities to non-technical stakeholders to ensure remediation efforts are understood and prioritized.

What is the difference between Penetration Tester vs Vulnerability Analyst?

AspectPenetration TesterVulnerability Analyst
CertificationsOSCP, CEH, GPENCVE, CISSP, GIAC
Work EnvironmentHands-on testing, simulated attacksVulnerability scanning, risk assessment
Employer & IndustryCybersecurity firms, IT departmentsSecurity teams, compliance agencies
Search & Comparison IntentUnderstanding testing roles, skillsIdentifying vulnerabilities, analysis methods

While both roles focus on cybersecurity, a Penetration Tester actively exploits vulnerabilities to test security defenses, whereas a Vulnerability Analyst identifies and assesses weaknesses without exploiting them. Penetration Testers typically perform simulated attacks, requiring hands-on skills and certifications like OSCP or CEH. Vulnerability Analysts focus on scanning and reporting vulnerabilities, often working with tools like Nessus or Qualys. Both roles are essential for a comprehensive security strategy but differ in approach and responsibilities.

How much do penetration testers make?

Penetration testers typically earn between $70,000 and $130,000 annually, depending on experience, certifications, and location. Senior professionals with advanced skills and certifications like OSCP or CISSP can earn higher salaries, especially in high-demand markets.

Is penetration testing a hard job?

Penetration testing can be challenging as it requires strong technical skills, problem-solving abilities, and knowledge of security vulnerabilities. The job often involves staying updated on new threats and using tools like Kali Linux and Metasploit, which can be complex for beginners. Success in this role depends on continuous learning and practical experience.
More about Penetration Tester jobs

What are the most commonly searched types of Penetration Tester jobs in Michigan?

The most popular types of Penetration Tester jobs in Michigan are:

What are popular job titles related to Penetration Tester jobs in Michigan?

For Penetration Tester jobs in Michigan, the most frequently searched job titles are:

What job categories do people searching Penetration Tester jobs in Michigan look for?

The top searched job categories for Penetration Tester jobs in Michigan are:

What cities in Michigan are hiring for Penetration Tester jobs?

Cities in Michigan with the most Penetration Tester job openings:

What are popular job titles related to Penetration Tester jobs in MI?

For Penetration Tester jobs in MI, the most frequently searched job titles are:

Penetration Tester jobs near you
Infographic showing various Penetration Tester job openings in Michigan as of August 2026, with employment types broken down into 81% Full Time, 14% Part Time, and 5% Contract. Highlights an 79% In-person, 3% Hybrid, and 18% Remote job distribution, with an average salary of $104,500 per year, or $50.2 per hour.

Senior Specialist, MAST Application Penetration Tester

KPMG US

Detroit, MI • On-site

Full-time

Re-posted 5 days ago

Job description

Job Summary:
KPMG is a leading advisory firm that offers excellent opportunities for career advancement. They are currently seeking a Senior Specialist, MAST Application Penetration Tester to conduct manual penetration testing and evaluate application security within their Managed Services practice.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.

Apply