Required : • Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications • Bachelor's degree ...
Required : • Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications • Bachelor's degree ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
Cyber Security Engineer
Columbus, OH · On-site
Hello, Title: Cyber Security Engineer Location: Columbus, OH Contract Duration: 6 months Hired ... Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and ...
Cyber Security Engineer
Columbus, OH · On-site
Hello, Title: Cyber Security Engineer Location: Columbus, OH Contract Duration: 6 months Hired ... Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
The Senior Cybersecurity Engineer is a fully onsite role in Columbus, Ohio. Remote work is not ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
The Senior Cybersecurity Engineer is a fully onsite role in Columbus, Ohio. Remote work is not ... Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through ... Production Python engineering: you build and operate real tooling, not only one‑off scripts.
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through ... Production Python engineering: you build and operate real tooling, not only one‑off scripts.
Business Process Red Team Operator
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Business Process Red Team Operator
$156K - $260K/yr
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing ...
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Quick apply
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Cybersecurity Engineer
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Cybersecurity Engineer
$88K - $103K/yr
The Cybersecurity Engineer provides professional support in multiple areas of information security ... Performs vulnerability assessments, penetration testing, security assessments, and related ...
Business Process Red Team Operator
Columbus, OH · On-site
$58K - $79K/yr
... engineering attacks, and preparation of deliverables for senior stakeholders * Design and execute testing and simulations such as penetration tests, technical controls assessments, cyber exercises ...
New
Business Process Red Team Operator
Columbus, OH · On-site
$58K - $79K/yr
... engineering attacks, and preparation of deliverables for senior stakeholders * Design and execute testing and simulations such as penetration tests, technical controls assessments, cyber exercises ...
New
Cybersecurity Engineer
Columbus, OH · On-site
Cybersecurity Engineer Location: On-site at Columbus, OH Duration: 12 Months with potential to ... Conduct and support vulnerability assessments and penetration testing. * Ensure compliance with ...
Quick apply
Cybersecurity Engineer
Columbus, OH · On-site
Cybersecurity Engineer Location: On-site at Columbus, OH Duration: 12 Months with potential to ... Conduct and support vulnerability assessments and penetration testing. * Ensure compliance with ...
Driller Assistant/Exploration Team Member I
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and ... minds focused on solving engineering and technical challenges from more than 200 locations ...
Driller Assistant/Exploration Team Member I
$21.75 - $29.50/hr
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and ... minds focused on solving engineering and technical challenges from more than 200 locations ...
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and ... minds focused on solving engineering and technical challenges from more than 200 locations ...
In-situ testing techniques may include cone penetration testing (CPT), pressure meter testing, and ... minds focused on solving engineering and technical challenges from more than 200 locations ...
Sr Manager of Security Engineering- Backend
Columbus, OH · Hybrid
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Sr Manager of Security Engineering- Backend
Columbus, OH · Hybrid
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Sr Manager of Security Engineering- Backend
Columbus, OH · On-site
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Sr Manager of Security Engineering- Backend
Columbus, OH · On-site
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Sr Manager of Security Engineering- Backend
Columbus, OH · Hybrid
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Sr Manager of Security Engineering- Backend
Columbus, OH · Hybrid
$107K - $147K/yr
As a Senior Manager of Security Engineering at JPMorganChase within the Cybersecurity Technology ... Extensive experience with threat modeling, discovery, vulnerability, and penetration testing ...
Penetration Testing Engineer information
See salary details
$11K - $26.7K
0% of jobs
$26.7K - $42.4K
13% of jobs
$42.4K - $58K
0% of jobs
$58K - $73.7K
0% of jobs
$79.6K is the 25th percentile. Wages below this are outliers.
$73.7K - $89.4K
31% of jobs
The median wage is $95.2K / yr.
$89.4K - $105.1K
15% of jobs
$105.1K - $120.8K
3% of jobs
$134.9K is the 75th percentile. Wages above this are outliers.
$120.8K - $136.5K
13% of jobs
$136.5K - $152.1K
7% of jobs
$152.1K - $167.8K
8% of jobs
$167.8K - $183.5K
8% of jobs
$11K
$109.6K
$183.5K
How much do penetration testing engineer jobs pay per year?
As of Aug 15, 2026, the average yearly pay for penetration testing engineer in the United States is $109,565.00, according to ZipRecruiter salary data. Most workers in this role earn between $80,000.00 and $143,000.00 per year, depending on experience, location, and employer.
What are popular job titles related to Penetration Testing Engineer jobs?
For Penetration Testing Engineer jobs, the most frequently searched job titles are:
- Junior Vulnerability Assessment Penetration Testing
- Part Time Vulnerability Assessment Penetration Testing
- Volunteer Web Penetration Tester
- Temporary Vulnerability Assessment Penetration Testing
- Day Cloud Penetration Tester
- Cyber Security Penetration Tester
- On Call Web Penetration Tester
- Full Time Vulnerability Assessment Penetration Testing
- Full Time Cloud Penetration Tester
- Penetration Test
What job categories do people searching Penetration Testing Engineer jobs look for?
The top searched job categories for Penetration Testing Engineer jobs are:
- Overnight International Penetration Tester
- Penetration Testers
- Trainee International Penetration Tester
- Ejpt
- Home Based Penetration Tester Red Team
- Temporary Cybersecurity Penetration Tester
- Senior International Penetration Tester
- Ethical Penetration Testing
- Penetration Tester Ethical Hacker Redlens Infosec
- Entry Level Cybersecurity Penetration Tester
Full-time
Re-posted 15 days ago
Job description
Job Summary:
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.