> Markdown version of [/jobs/ext/1901309-specialist-director-mast-application-penetration-testing-lead](https://www.wearedevelopers.com/jobs/ext/1901309-specialist-director-mast-application-penetration-testing-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Specialist Director, MAST Application Penetration Testing Lead

- **Company:** Kpmg LLP
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $169,005.0
- **Contract:** Permanent contract
- **Skills:** Testing (Software), Software System Penetration Testing, Cloud Computing, Cloud Engineering, Internet Security, Systems Development Life Cycle, Secure Coding, Software Engineering, Software Security, Information Technology, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** July 31, 2026
- **Apply:** https://www.careerbuilder.com/job-details/specialist-director-managed-security-testing-san-francisco-ca--4c08adeb-3202-483f-b3e9-7569fbf24d25

## About the Role

* Minimum eight years of recent experience in application security, penetration testing, or related cybersecurity domains, with at least three years in a leadership or director-level role
 * Master's degree from an accredited college or university in cybersecurity, computer science, or related field is preferred; Bachelor's degree from an accredited college or university is required
 * Deep understanding of application security testing methodologies, tools (for example, DAST, SAST, IAST), and secure SDLC practices
 * Proven experience developing and executing GTM strategies for security services or technology solutions
 * Strong client-facing skills with the ability to communicate complex technical concepts to non-technical stakeholders
 * Excellent verbal/written communication, presentation, and analytical skills
 * Ability to travel as required
 * Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa), Analysis Skills, Applications Security, Best Practices, Business Operations, Cloud Computing, Communication Skills, Computer Science, Continuous Improvement, Cross-Functional, Customer Relations, Develop and Maintain Customers, Insurance, Internet Security, Leadership, Mentoring, Penetration Testing, Presentation/Verbal Skills, Product Lifecycle, Protective Services, Psychiatry and Mental Health, Quality Assurance Methodology, Revenue Growth, Risk Analysis, Security Attacks, Security Monitoring, Software Development Lifecycle (SDLC), Software Testing, Team Lead/Manager, Testing, Willing to Travel, Writing Skills

## Description

* Lead the strategic delivery of Managed Application Security Testing (MAST) services, ensuring alignment with client objectives and industry best practices
 * Develop and execute go-to-market (GTM) strategies for MAST offerings, collaborating with cross-functional teams to drive market penetration and revenue growth
 * Oversee the design and implementation of scalable security testing frameworks across diverse application environments, including cloud-native and hybrid architectures
 * Provide subject matter expertise in application security, guiding clients through risk assessments, remediation planning, and secure development lifecycle integration
 * Build and maintain strong client relationships, serving as a trusted advisor and ensuring high levels of satisfaction and retention
 * Mentor and lead a team of security professionals, fostering a culture of innovation, accountability, and continuous improvement
 * Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment


## Related Videos

- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [How GitHub secures open source](https://www.wearedevelopers.com/videos/1450-how-github-secures-open-source)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)