About this role
We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.
RSM is looking for an entry-level application penetration tester interested in learning manual and automated testing to join our Security and Privacy Risk Consulting group. The ideal candidate will have a basic understanding of different testing methods and tools and be eager to develop their skills in identifying vulnerabilities and security risks. This role assists clients in preventing, detecting, and responding to security threats to their critical systems and data.
As part of the Security, Privacy, and Risk Consulting team, you will assist in application security testing under the guidance of experienced professionals. Our goal is to empower development and security teams with high-quality security findings to eliminate risks across client applications. Join over 150 professionals dedicated to meeting the cybersecurity needs of various industries.
Responsibilities:
- Conduct comprehensive security assessments, incorporating both static and dynamic application security testing methods.
- Perform manual penetration testing on web applications, network devices, and other systems
- Collaborate with clients in a dynamic environment across various technology stacks and services, including cloud platforms and development technologies
- Develop, refine, and interpret security standards and guidance
- Demonstrate and advocate for security best practices, including secure development and cloud security.
- Assist in developing remediation recommendations for identified findings
- Effectively identify and communicate findings, both in writing and verbally, to senior management and clients
- Assist in identifying improvement opportunities for assigned clients.
- Stay informed about current security trends, technologies, and best practices
- Foster a collaborative environment by encouraging open communication and cooperation among team members to achieve shared goals and successful outcomes
- Assist in coordinating and supporting other team members working on assigned projects
Qualifications:
- BS in Computer Science, Engineering, or related field or equivalent work experience
- Years of experience in code review, application security testing, or web application development
- Strong written and verbal communication skills
- Proficient in scripting languages (e.g., Python, Ruby, Perl)
- Experience with cloud platforms, such as AWS, and knowledge of cloud security best practices
- Knowledge of Docker, CDK, Terraform, Java, Python, React, GraphQL, Javascript, JSON, REST, etc.
- Possesses a technical background in application development, networking/system administration, security testing, or related disciplines
- Experience with static application security testing (SAST) and dynamic application security testing (DAST) using a variety of tools and techniques
- Preferred, though not mandatory, are one or more relevant certifications such as Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, or AWS Certified Security Specialist.
At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits https://rsmus.com/careers/el-salvador.html.
RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.
Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at [email protected].
Other facts
About RSM US LLP
Stay Alert: Avoid Recruitment Scams
Across industries, cybercriminals are posing as company recruiters using fake job postings and employment offers to trick people into providing personal information or payment. Be alert and never provide personal/financial information or payment to anyone claiming to offer a job opportunity. During the recruiting process, RSM US will never:
• Ask you for payment to process documents, purchase equipment, or for any other reason.
• Request your banking or credit card information
• Send you a check to purchase your own equipment
If you believe you are a victim of a job scam, it’s recommended that you report it to law enforcement, contact your financial institution and notify the website in which the job was listed.
---
RSM is the leading provider of assurance, tax and consulting services to the middle market. With over 17,000 professionals across the U.S. and Canada and a global presence in 120 countries, our purpose is to deliver the power of being understood to our clients, colleagues and communities. As first-choice advisors, we are focused on developing leading professionals and innovative services to meet our clients’ evolving needs in today’s ever-changing business environment.
At RSM, we strive to deeply understand the full picture of an employee’s individual skills and passions. Our culture empowers you to own your career to reach your goals and make a meaningful impact on the world around you. Gain limitless opportunities to grow forward personally and professionally. Don’t just go forward. #GrowForwardatRSM
For more information, visit rsmus.com
Learn how you can #GrowForwardatRSM visit www.rsmus.com/careers
What you'll do
- Conduct comprehensive security assessments and perform manual penetration testing on various systems. Collaborate with clients to identify vulnerabilities and provide remediation recommendations.
Ready to join RSM US LLP?
Take the next step in your career journey