The role involves conducting manual application penetration testing and executing threat modeling ... GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers ...
The role involves conducting manual application penetration testing and executing threat modeling ... GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$107K - $146K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$107K - $146K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations * Experience with vulnerability management, penetration testing, threat hunting, and ...
... penetration testing to find vulnerabilities. • Develops IT security standards, policies and procedures to implement security practices. • Teaches peers about security procedures. • Specializes ...
... penetration testing to find vulnerabilities. • Develops IT security standards, policies and procedures to implement security practices. • Teaches peers about security procedures. • Specializes ...
Conducts penetration testing to find vulnerabilities. Develops IT security standards, policies and procedures to implement security practices. Teaches peers about security procedures. Specializes in ...
Conducts penetration testing to find vulnerabilities. Develops IT security standards, policies and procedures to implement security practices. Teaches peers about security procedures. Specializes in ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Business Process Red Team Operator
Columbus, OH · On-site
$156K - $260K/yr
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations* Experience with vulnerability management, penetration testing, threat hunting, and ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations* Experience with vulnerability management, penetration testing, threat hunting, and ...
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Business Process Red Team Operator
$156K - $260K/yr
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Business Process Red Team Operator
$156K - $260K/yr
Contribute to leading-edge security and resilience efforts, advancing protective strategies and ... Design and execute testing and simulations - such as penetration tests, technical controls ...
Information Security Analyst
Columbus, OH · On-site
Conduct penetration testing on system operations and websites to identify vulnerabilities and exploits and ensure proper functionality * Research, develop and recommend information security policies ...
Information Security Analyst
Columbus, OH · On-site
Conduct penetration testing on system operations and websites to identify vulnerabilities and exploits and ensure proper functionality * Research, develop and recommend information security policies ...
Information Security Analyst
Columbus, OH · On-site
Conduct penetration testing on system operations and websites to identify vulnerabilities and exploits and ensure proper functionality * Research, develop and recommend information security policies ...
Information Security Analyst
Columbus, OH · On-site
Conduct penetration testing on system operations and websites to identify vulnerabilities and exploits and ensure proper functionality * Research, develop and recommend information security policies ...
Cyber Security Engineer
Columbus, OH · On-site
... of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk Assessment and ...
Cyber Security Engineer
Columbus, OH · On-site
... of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk Assessment and ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk ...
Vulnerability Management, Network Security, Identity Management, Firewall Management, End Point Protection, Risk Management, Incident Response, Penetration Testing, Security Information and Event ...
Vulnerability Management, Network Security, Identity Management, Firewall Management, End Point Protection, Risk Management, Incident Response, Penetration Testing, Security Information and Event ...
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
Performs vulnerability assessments, penetration testing, security assessments, and related reporting, including recommended remediation actions;Ensures access control, incident response, risk ...
Quick apply
Cybersecurity Engineer
Columbus, OH · On-site
$88K - $103K/yr
Performs vulnerability assessments, penetration testing, security assessments, and related reporting, including recommended remediation actions;Ensures access control, incident response, risk ...
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar ABOUT US JPMorganChase, one of the ...
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar ABOUT US JPMorganChase, one of the ...
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar JPMorganChase, one of the oldest ...
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar JPMorganChase, one of the oldest ...
Lead Product Security Engineer - Collaboration & Content Platforms
Columbus, OH · On-site
$156K - $215K/yr
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar About Us JPMorganChase, one of the ...
Lead Product Security Engineer - Collaboration & Content Platforms
Columbus, OH · On-site
$156K - $215K/yr
Experience with threat modeling, discovery, vulnerability, and penetration testing * Knowledge of ... Security Operations Analyst Associate (SC-200), or similar About Us JPMorganChase, one of the ...
Security Penetration Testing information
See salary details
$61.5K - $74.6K
0% of jobs
$74.6K - $87.7K
2% of jobs
$87.7K - $100.8K
3% of jobs
$100.8K - $113.9K
6% of jobs
$113.9K - $127K
5% of jobs
$127K - $140K
4% of jobs
$141.4K is the 25th percentile. Wages below this are outliers.
$140K - $153.1K
39% of jobs
$161.2K is the 75th percentile. Wages above this are outliers.
$153.1K - $166.2K
24% of jobs
$166.2K - $179.3K
2% of jobs
$179.3K - $192.4K
0% of jobs
$192.4K - $205.5K
14% of jobs
$61.5K
$152.8K
$205.5K
How much do security penetration testing jobs pay per year?
As of Aug 20, 2026, the average yearly pay for security penetration testing in the United States is $152,773.00, according to ZipRecruiter salary data. Most workers in this role earn between $143,000.00 and $158,500.00 per year, depending on experience, location, and employer.
What are popular job titles related to Security Penetration Testing jobs?
For Security Penetration Testing jobs, the most frequently searched job titles are:
- Entry Level Cyber Security Analyst Intern
- Entry Level Siem Engineer
- Senior Cyber Security Risk Analyst
- Cyber Security Analyst Google
- Full Time Dlp Analyst
- Application Security Consultant
- Overnight Cyber Security Purple Team
- Temp Cyber Security Analyst
- Cyber Security Analyst Tier 2
- Information Security Management
What job categories do people searching Security Penetration Testing jobs look for?
The top searched job categories for Security Penetration Testing jobs are:
What cities are hiring for Security Penetration Testing jobs?
Cities with the most Security Penetration Testing job openings:
What states have the most Security Penetration Testing jobs?
States with the most job openings for Security Penetration Testing jobs include:
Full-time
Re-posted 20 days ago
Job description
Job Summary:
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.