Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications • Perform objective based on ...
Responsibilities : • Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications • Perform objective based on ...
Red Team Operator - Assistant Director
Columbus, OH · On-site
$128.10 - $239.60/hr
Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures. * Perform ...
New
Red Team Operator - Assistant Director
Columbus, OH · On-site
$128.10 - $239.60/hr
Conduct advanced penetration testing across environments: external/internal networks, web/cloud applications, APIs, Active Directory, identity systems, and hybrid/cloud infrastructures. * Perform ...
New
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$110K - $151K/yr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure * Administer Zscaler ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk ...
A solid understanding of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure* Administer Zscaler ...
Senior Cybersecurity Engineer
Columbus, OH · On-site
$120 - $180/hr
Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure* Administer Zscaler ...
Offensive Security Manager
Columbus, OH · On-site
$107K - $144K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Offensive Security Manager
Columbus, OH · On-site
$107K - $144K/yr
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Web application penetration testing * Wireless penetration testing * Social engineering (phishing, telephone, onsite) * Red teaming/Threat emulation * Purple teaming * Evaluate and test IT controls, ...
New
Cyber Security Engineer
Columbus, OH · On-site
... of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk Assessment and ...
Cyber Security Engineer
Columbus, OH · On-site
... of Penetration Testing, Vulnerability Management, Threat Vector Analysis, Intrusion Detection and Prevention, Incident Management and Response, Web Application Security, Risk Assessment and ...
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
New
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
New
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
Cybersecurity Endpoint Engineering
Columbus, OH · On-site
$99 - $129/hr
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
New
Cybersecurity Endpoint Engineering
Columbus, OH · On-site
$99 - $129/hr
... testing, penetration testing or other means to ensure controls effectiveness. Identifies and ... Design, implement, and manage web access security policies, URL filtering controls, traffic ...
New
... Web Application Firewall (desired) Q-Radar SIEM (desired) Penetration testing (3 years desired) Interview Process: Initial 15 minute phone call for 1st Round. 2nd round face to face Interview.
... Web Application Firewall (desired) Q-Radar SIEM (desired) Penetration testing (3 years desired) Interview Process: Initial 15 minute phone call for 1st Round. 2nd round face to face Interview.
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Senior Engineer, Offensive Security
Columbus, OH · On-site
$118 - $162/hr
Run penetration tests. Network, web-application, cloud, and infrastructure testing, recon through exploitation, privilege escalation, and lateral movement, accelerated by the tooling you build, with ...
Web Penetration Testing information
See salary details
$11.54 - $18.36
4% of jobs
$18.36 - $25.17
0% of jobs
$25.17 - $31.99
0% of jobs
$31.99 - $38.81
6% of jobs
$38.81 - $45.63
5% of jobs
$50.89 is the 25th percentile. Wages below this are outliers.
$45.63 - $52.45
12% of jobs
The median wage is $59.11 / hr.
$52.45 - $59.27
23% of jobs
$65.74 is the 75th percentile. Wages above this are outliers.
$59.27 - $66.08
26% of jobs
$66.08 - $72.90
13% of jobs
$72.90 - $79.72
3% of jobs
$79.72 - $86.54
7% of jobs
$11
$59
$86
How much do web penetration testing jobs pay per hour?
As of Aug 22, 2026, the average hourly pay for web penetration testing in the United States is $59.01, according to ZipRecruiter salary data. Most workers in this role earn between $51.20 and $66.83 per hour, depending on experience, location, and employer.
What are popular job titles related to Web Penetration Testing jobs?
For Web Penetration Testing jobs, the most frequently searched job titles are:
- Penetration Tester Part Time
- Freelance Penetration Testing Ethical Hacking
- Part Time Web Penetration Tester
- Volunteer Web Penetration Tester
- Full Time Vulnerability Assessment Penetration Testing
- Penetration Tester
- Part Time Ethical Hacking
- Part Time Cyber Security Instructor
- Senior Specialist Penetration Testing Ethical Hacking
- Remote Penetration Tester
What job categories do people searching Web Penetration Testing jobs look for?
The top searched job categories for Web Penetration Testing jobs are:
- Penetration Tester Ethical Hacker
- Cyber Security Penetration Testing
- Part Time Penetration Tester Ethical Hacker
- Apprentice Penetration Tester Ethical Hacker
- Overnight Cybersecurity Penetration Tester
- Pnpt Certification
- Part Time Oscp
- Penetration Tester Ethical Hacker Redlens Infosec
- Oscp Salary
- Ethical Penetration Testing
What cities are hiring for Web Penetration Testing jobs?
Cities with the most Web Penetration Testing job openings:
What states have the most Web Penetration Testing jobs?
States with the most job openings for Web Penetration Testing jobs include:
Full-time
Re-posted 22 days ago
Job description
Job Summary:
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.
KPMG is a leading advisory firm seeking a Senior Specialist, MAST Application Penetration Tester to join their Managed Services practice. The role involves conducting manual application penetration testing and executing threat modeling while working independently in various engagements.
Responsibilities:
• Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
• Perform objective based on abstract penetration testing engagements
• Execute threat modeling, evaluate application business logic, and perform application architecture reviews
• Demonstrate application testing experience in real time via demos to both internal and external audiences
• Function independently in penetration testing engagements, with minimal oversight and guidance
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications:
Required:
• Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
• Bachelor's degree from an accredited college/university or equivalent industry experience
• Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
• Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
• Ability to travel as required
• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Preferred:
• One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
Company:
KPMG is one of the world’s leading professional services firms and the fastest growing Big Four accounting firm in the United States. Founded in 2010, the company is headquartered in New York, USA, with a team of 10001+ employees. The company is currently Late Stage.