The role involves conducting manual application penetration testing and executing threat modeling ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting manual application penetration testing and executing threat modeling ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting application penetration testing, executing threat modeling, and ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting application penetration testing, executing threat modeling, and ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting manual application penetration testing and executing threat modeling ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting manual application penetration testing and executing threat modeling ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting application penetration testing and threat modeling while ensuring a ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
The role involves conducting application penetration testing and threat modeling while ensuring a ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA ...
Penetration Tester
Reston, VA · On-site
CREST Penetration Testing / CBEST Qualifications Skills: .NET , C# , JAVA
Penetration Tester
Reston, VA · On-site
CREST Penetration Testing / CBEST Qualifications Skills: .NET , C# , JAVA
NJ · On-site
$125 - $170/hr
Lead a team of security professionals delivering complex penetration testing assignments ... Relevant certifications (e.g., CREST, OSCP, SANS) and/or Red/Purple team experience are highly ...
NJ · On-site
$125 - $170/hr
Lead a team of security professionals delivering complex penetration testing assignments ... Relevant certifications (e.g., CREST, OSCP, SANS) and/or Red/Purple team experience are highly ...
Senior Penetration Tester
Manhattan, NY · On-site
$180 - $280/hr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
$180 - $280/hr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
$156K - $260K/yr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
$156K - $260K/yr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Senior Specialist, MAST Application Penetration Tester
Atlanta, GA · On-site
$95K - $208K/yr
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Senior Penetration Tester
Manhattan, NY · On-site
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
$156K - $260K/yr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Senior Penetration Tester
Manhattan, NY · On-site
$156K - $260K/yr
Plan, scope, and execute penetration testing engagements across a variety of environments ... Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or ...
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile ... Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Certified Information Systems Security Professional (CISSP), GIAC Web Application Penetration Tester (GWAPT), Council of Registered Ethical Security Testers (CREST), Offensive Security Web Expert ...
Certified Information Systems Security Professional (CISSP), GIAC Web Application Penetration Tester (GWAPT), Council of Registered Ethical Security Testers (CREST), Offensive Security Web Expert ...
Lead Penetration Test Engineer
New York, NY · Hybrid
$135K/yr
Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web ... At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST ...
Lead Penetration Test Engineer
New York, NY · Hybrid
$135K/yr
Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web ... At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST ...
On your first day, we'll expect you to have: * 5+ years working in a whitebox penetration testing ... OSCP, OSCE, OSWE, CREST CRT, GPEN * CVE's to your name * Presentation experience at industry events
On your first day, we'll expect you to have: * 5+ years working in a whitebox penetration testing ... OSCP, OSCE, OSWE, CREST CRT, GPEN * CVE's to your name * Presentation experience at industry events
Lead Penetration Test Engineer
Chicago, IL · Hybrid
$135K/yr
Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web ... At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST ...
Lead Penetration Test Engineer
Chicago, IL · Hybrid
$135K/yr
Penetration Testing & Vulnerability Assessments Conduct comprehensive penetration testing of web ... At least one recognized offensive security certification (OSCP, OSCE3, OSEP, GXPN, GPEN, or CREST ...
Penetration Testing Crest information
See salary details
$22.5K - $35.8K
0% of jobs
$35.8K - $49K
0% of jobs
$49K - $62.3K
2% of jobs
$62.3K - $75.6K
3% of jobs
$75.6K - $88.9K
1% of jobs
$101.1K is the 25th percentile. Wages below this are outliers.
$88.9K - $102.1K
20% of jobs
$102.1K - $115.4K
14% of jobs
The median wage is $120.4K / yr.
$115.4K - $128.7K
26% of jobs
$138.1K is the 75th percentile. Wages above this are outliers.
$128.7K - $142K
13% of jobs
$142K - $155.2K
13% of jobs
$155.2K - $168.5K
9% of jobs
$22.5K
$119.9K
$168.5K
How much do penetration testing crest jobs pay per year?
What is the difference between Penetration Testing Crest vs Penetration Tester?
| Aspect | Penetration Testing Crest | Penetration Tester |
|---|---|---|
| Certifications | CREST certifications (e.g., CRT, CPSA) | OSCP, CEH, GPEN often preferred |
| Work Environment | Consulting firms, security service providers | In-house security teams, consulting firms |
| Industry Usage | Common in UK and global security firms | Global, widely used across industries |
| Search & Comparison Intent | Focus on CREST accreditation and standards | Focus on skills, certifications, and experience |
While both roles involve identifying security vulnerabilities, Penetration Testing Crest emphasizes CREST certification standards and accreditation, often within UK-based or global security firms. Penetration Tester is a broader role that may or may not require CREST credentials, focusing on hands-on testing skills across various industries worldwide.
What cities are hiring for Penetration Testing Crest jobs?
Cities with the most Penetration Testing Crest job openings:
What states have the most Penetration Testing Crest jobs?
States with the most job openings for Penetration Testing Crest jobs include:
What job categories do people searching Penetration Testing Crest jobs look for?
The top searched job categories for Penetration Testing Crest jobs are:
- Trainee International Penetration Tester
- Penetration Tester Ethical Hacker Redlens Infosec
- Burp Suite Practitioner
- Penetration Tester Ethical Hacker
- Full Time Cybersecurity Penetration Tester
- Ethical Penetration Testing
- Apprentice Penetration Tester Ethical Hacker
- Ejpt
- Overnight Cybersecurity Penetration Tester
- Overnight International Penetration Tester

Full-time
Re-posted 5 days ago
Job description
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.