We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.
The Penetration Tester conducts authorized security assessments of applications, APIs, and network infrastructure to identify vulnerabilities and security weaknesses. Working closely with development, infrastructure, and security teams, the Penetration Tester leverages technical expertise, creativity, and an attacker mindset to identify and exploit weaknesses in internally developed and third-party systems.
The ideal candidate is responsible for performing security assessments, documenting findings, validating remediation efforts, and providing actionable recommendations based on industry best practices. The ideal candidate has experience with application and network penetration testing, a strong understanding of secure development principles, and familiarity with modern security testing methodologies including OWASP Top 10, SANS Top 25, and API security testing.
Responsibilities
Perform web application, API, and network security assessments.
Identify, exploit, and validate security vulnerabilities in applications and infrastructure.
Create test cases, document findings, and track remediation activities in Azure DevOps.
Provide risk-based security recommendations and guidance to stakeholders.
Validate remediation efforts and conduct retesting of previously identified vulnerabilities.
Research emerging threats, attack techniques, and industry security trends.
Assist in developing and automating penetration testing methodologies and security processes.
Participate in the creation of technical and executive-level assessment reports.
Utilize AI-assisted tools and techniques where appropriate to improve testing efficiency and coverage.
Perform other duties as assigned.
Qualifications
EDUCATION
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent experience.
CERTIFICATIONS (preferred)
GPEN (GIAC Penetration Tester)
CEH (Certified Ethical Hacker)
Security+
CISSP
TECHNICAL SKILLS
Required
Experience performing web application and network penetration testing.
Proficiency with Burp Suite Professional.
Understanding of OWASP Top 10, SANS Top 25, and common attack methodologies.
Ability to read, understand, and audit source code during source code-assisted penetration testing.
Strong understanding of authentication, authorization, session management, and common application security vulnerabilities.
Experience creating clear and actionable technical documentation and reports.
Experience With:
Programming Languages: C#, Java, JavaScript, Python, or similar.
Scripting/Automation: Python, PowerShell, Bash, or equivalent.
API Security Testing (REST, GraphQL, SOAP).
Azure DevOps or similar ticketing and defect tracking platforms.
Linux and Windows operating systems.
Cloud Platforms (Azure, AWS, or GCP).
Preferred
Experience testing AI-enabled applications and Large Language Model (LLM) integrations.
Familiarity with OWASP Top 10 for LLM Applications.
Experience leveraging AI-assisted security testing tools and workflows.
EXPERIENCE
Required
3-5+ years of experience in penetration testing, application security, or cybersecurity engineering.
Experience conducting application and network penetration tests in enterprise environments.
Experience writing professional technical and executive-level security reports.
LEADERSHIP & COMMUNICATION
Required
Strong verbal and written communication skills.
Ability to communicate technical findings to technical and non-technical audiences.
Strong collaboration skills with Security Leads, Managers, Developers, and Infrastructure teams.
Ability to manage multiple projects and meet deadlines in a fast-paced environment.
Strong analytical, troubleshooting, and problem-solving skills.
At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits https://rsmus.com/careers/el-salvador.html.
RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.
Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.
About RSM
RSM is a leading global network of assurance, tax and consulting advisors focused on helping businesses navigate change and realize their full potential. With more than 56,000 professionals across more than 120 countries, RSM combines global reach with a distinctly client-centric approach, taking the time to understand each organization’s unique challenges, ambitions and opportunities.
At the heart of RSM’s model is a simple belief: clients need more than technical expertise. They need advisors who understand their business, anticipate what’s ahead and help them move forward with confidence. This commitment to delivering a personalized experience, grounded in deep industry and business knowledge, is reflected in RSM’s promise to instill confidence in a world of change.
RSM US LLP, a member of the global RSM network, brings this approach to the U.S. middle market. As the fifth-largest accounting firm in the United States, RSM US has grown from its founding in 1926 to more than 21,000 professionals serving clients across 119 locations in the US, Canada, the UK, and Ireland with additional offices across its international footprint.
Together, RSM’s scale, specialized expertise and understanding of the middle market position the firm to help clients address today’s most pressing challenges while building for what comes next.
Military Support
VALOR (Veterans and Allies Leading Outreach) is RSM’s employee network group dedicated to strengthening the recruitment, retention, development and success of veterans, active and reserve military members, military spouses, families and allies. Through connection, advocacy and professional development, VALOR creates a community where military-connected professionals can build meaningful relationships, advance their careers and bring the unique skills and experiences gained through service to RSM and its clients.
VALOR champions the continued growth and success of its members by connecting them to resources, mentorship, networking and leadership opportunities across RSM. Members share career and military-related resources, advocate for one another and provide a strong network of support, including for colleagues continuing to serve when military commitments or deployments take them away from the workplace.
Beyond RSM, VALOR extends its impact into local communities and the broader military-connected ecosystem through regional and national strategic business alliances, events and initiatives. These efforts create opportunities for professional development, leadership growth, networking, business development and community engagement, while helping RSM attract and retain exceptional military-connected talent.
At its core, VALOR is about turning the strengths of military service into lasting impact for our people, our clients and the communities we serve.
Internships and RSM Excellence Academy
At RSM, you’ll be valued as an individual while interning with our firm. We recognize your accomplishments and unique potential, and mentor you as a future leader. By working directly with RSM professionals and leaders, you’ll move quickly along the learning curve to jump-start your career in accounting, consulting, tax, or operations.
Internships include orientation and training where interns will be prepared to work in client service through a combination of formal and informal training. Interns will receive hands-on experience working with a variety of clients, while teaming up with RSM colleagues and leaders. RSM will provide interns with lunch-and-learn workshops, sporting events, and community service projects. Interns will gather with their peers and co-workers to develop both personally and professionally. Interns will be paired with both a navigator and a career advisor to help transition into their new role. The navigator is a peer aligned with you to help with questions. The career advisor ensures your experience meets your expectations and that you’re doing the right things to work toward that job offer.
The RSM Excellence Academy consists of a three-day summer leadership conference with a stipend and the opportunity to participate in an internship with RSM during the following summer. The Excellence Academy is open to all qualified students who are three years from graduation. The Excellence Academy is designed to align with RSM’s strategic pillar of driving an unrivaled, inclusive culture and talent experience. We recognize efforts of inclusivity and intend to develop outstanding business, accounting, and technology students for internships and full-time employment. Participants will have an opportunity to build relationships that will assist them in their educational and career development. We hope that this experience will provide students with an overall understanding of the professional services industry, RSM’s culture, and the advantages of working in the middle market.