> Markdown version of [/jobs/ext/1181454-senior-specialist-mast-application-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1181454-senior-specialist-mast-application-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Specialist, MAST Application Penetration Tester

- **Company:** Kpmg LLP
- **Location:** Dallas, TX, United States
- **Experience:** Expert
- **Salary:** $95,855.0 - $208,265.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Applications Architecture, Business Logic, Software System Penetration Testing, Application Testing, Automation of Tests, Burp Suite, Fat Client, Mobile Application Software, Simple Object Access Protocol (SOAP), Web Applications, GWAPT, Checkmarx
- **Published:** July 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=719cc0cfbcdb392c

## About the Role

* Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
 * Bachelor's degree from an accredited college/university or equivalent industry experience
 * Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
 * Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
 * One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
 * Ability to travel as required
 * Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

## Description

* Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
 * Perform objective based on abstract penetration testing engagements
 * Execute threat modeling, evaluate application business logic, and perform application architecture reviews
 * Demonstrate application testing experience in real time via demos to both internal and external audiences
 * Function independently in penetration testing engagements, with minimal oversight and guidance
 * Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Contract Testing with MCP: Building Self-Describing, Self-Testing APIs](https://www.wearedevelopers.com/videos/100040-contract-testing-with-mcp-building-self-describing-self-testing-apis)
- [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Benefits of Using JMeter For Performance Testing](https://www.wearedevelopers.com/magazine/96-benefits-of-using-jmeter-for-performance-testing)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)