> Markdown version of [/jobs/ext/1503028-specialist-mast-application-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1503028-specialist-mast-application-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Specialist, MAST Application Penetration Tester

- **Company:** Kpmg LLP
- **Location:** Acton, CA, United States
- **Experience:** Expert
- **Salary:** $95,855.0 - $208,265.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, Application Testing, Automation of Tests, Burp Suite, Mobile Application Software, Web Applications, GWAPT, Checkmarx
- **Published:** July 30, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2898129774-2

## About the Role

* Minimum three years of recent experience in application penetration testing of Application Programming Interface (API's), web applications, or mobile applications
 * Bachelor's degree from an accredited college/university or equivalent industry experience
 * Ability to communicate reporting results with technical and non-technical audiences and lead remediation conversations
 * Experience with burp suite pro, and other app testing tools such as Netsparker and Checkmarx
 * One or more major ethical hacking certifications not required but preferred; GIAC Web Application Penetration Tester (GWAPT), Council for Registered Ethical Security Testers (CREST), Offensive Security Web Expert (OSWE), Offensive Security Web Assessor (OSWA)
 * Ability to travel as required
 * Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

## Description

* Conduct manual application penetration testing against API's (REST/SOAP), Web Applications, Mobile applications, and thick client applications
 * Perform objective based on abstract penetration testing engagements
 * Execute threat modeling, evaluate application business logic, and perform application architecture reviews
 * Demonstrate application testing experience in real time via demos to both internal and external audiences
 * Function independently in penetration testing engagements, with minimal oversight and guidance
 * Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Contract Testing with MCP: Building Self-Describing, Self-Testing APIs](https://www.wearedevelopers.com/videos/100040-contract-testing-with-mcp-building-self-describing-self-testing-apis)
- [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Benefits of Using JMeter For Performance Testing](https://www.wearedevelopers.com/magazine/96-benefits-of-using-jmeter-for-performance-testing)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Starter Kit For Job Applications For Developers](https://www.wearedevelopers.com/magazine/7-starter-kit-for-job-applications-for-developers)