The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements. Responsibilities : • Conduct manual application ...
The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements. Responsibilities : • Conduct manual application ...
Red Team Operator - Assistant Director
Columbus, OH · On-site
$128.10 - $239.60/hr
To qualify for the role you must have * 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security. * Demonstrated experience executing red team or advanced ...
New
Red Team Operator - Assistant Director
Columbus, OH · On-site
$128.10 - $239.60/hr
To qualify for the role you must have * 6-8 years of hands-on experience in penetration testing, red teaming, or offensive security. * Demonstrated experience executing red team or advanced ...
New
Offensive Security Manager
Columbus, OH · On-site
$107K - $144K/yr
In this role, you will continuously learn, collaborate across teams, and explore how tools ... Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming ...
New
Offensive Security Manager
Columbus, OH · On-site
$107K - $144K/yr
In this role, you will continuously learn, collaborate across teams, and explore how tools ... Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming ...
New
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
In this role, you will continuously learn, collaborate across teams, and explore how tools ... Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming ...
New
In this role, you will continuously learn, collaborate across teams, and explore how tools ... Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming ...
New
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler in support of ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler in support of ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler in support of ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler in support of ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis ... to remediate vulnerabilities in a web application CISSP certification is nice to have, not ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis ... to remediate vulnerabilities in a web application CISSP certification is nice to have, not ...
Cyber Security Engineer
Columbus, OH · On-site
... capabilities in order to advance the Cyber Threat program. -Enhance and distribute security ... Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and ...
Cyber Security Engineer
Columbus, OH · On-site
... capabilities in order to advance the Cyber Threat program. -Enhance and distribute security ... Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure* Administer Zscaler in support of ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
... penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure* Administer Zscaler in support of ...
... penetration testing to find vulnerabilities. • Develops IT security standards, policies and ... in information and network security. • Analyzes security risks, and plans controls. • ...
... penetration testing to find vulnerabilities. • Develops IT security standards, policies and ... in information and network security. • Analyzes security risks, and plans controls. • ...
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Offensive operations experience: 4+ years in roles such as Red Team, Penetration Testing, Purple Team / control validation, or Bug Bounty, with a track record of delivering engagements end to end ...
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Offensive operations experience: 4+ years in roles such as Red Team, Penetration Testing, Purple Team / control validation, or Bug Bounty, with a track record of delivering engagements end to end ...
Recommend best practices to integrate & automate application security testing as part of the system ... Participate in penetration tests; Perform vulnerability scans using department tools (e.g., Qualys)
Recommend best practices to integrate & automate application security testing as part of the system ... Participate in penetration tests; Perform vulnerability scans using department tools (e.g., Qualys)
Driller Assistant/Exploration Team Member I
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
Driller Assistant/Exploration Team Member I
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
Driller/Exploration Team Member IV
Gahanna, OH · On-site
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
Driller/Exploration Team Member IV
Gahanna, OH · On-site
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
Driller/Exploration Team Member IV
Gahanna, OH · On-site
$22.25 - $30.25/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
Driller/Exploration Team Member IV
Gahanna, OH · On-site
$22.25 - $30.25/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and rock dilatometer testing. Work may also include the installation of instrumentation such as ...
In Penetration Testing information
See salary details
$22.5K - $35.8K
0% of jobs
$35.8K - $49K
0% of jobs
$49K - $62.3K
2% of jobs
$62.3K - $75.6K
3% of jobs
$75.6K - $88.9K
1% of jobs
$101.1K is the 25th percentile. Wages below this are outliers.
$88.9K - $102.1K
20% of jobs
$102.1K - $115.4K
14% of jobs
The median wage is $120.4K / yr.
$115.4K - $128.7K
26% of jobs
$138.1K is the 75th percentile. Wages above this are outliers.
$128.7K - $142K
13% of jobs
$142K - $155.2K
13% of jobs
$155.2K - $168.5K
9% of jobs
$22.5K
$119.9K
$168.5K
How much do in penetration testing jobs pay per year?
As of Aug 21, 2026, the average yearly pay for in penetration testing in the United States is $119,895.00, according to ZipRecruiter salary data. Most workers in this role earn between $96,000.00 and $141,000.00 per year, depending on experience, location, and employer.
What are popular job titles related to In Penetration Testing jobs?
For In Penetration Testing jobs, the most frequently searched job titles are:
What job categories do people searching In Penetration Testing jobs look for?
The top searched job categories for In Penetration Testing jobs are:
What cities are hiring for In Penetration Testing jobs?
Cities with the most In Penetration Testing job openings:
What states have the most In Penetration Testing jobs?
States with the most job openings for In Penetration Testing jobs include:
Full-time
Re-posted 21 days ago
Job description
Job Summary:
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.