We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

RSM is looking for an entry-level application penetration tester interested in learning manual and automated testing to join our Security and Privacy Risk Consulting group. The ideal candidate will have a basic understanding of different testing methods and tools and be eager to develop their skills in identifying vulnerabilities and security risks. This role assists clients in preventing, detecting, and responding to security threats to their critical systems and data.

As part of the Security, Privacy, and Risk Consulting team, you will assist in application security testing under the guidance of experienced professionals. Our goal is to empower development and security teams with high-quality security findings to eliminate risks across client applications. Join over 150 professionals dedicated to meeting the cybersecurity needs of various industries.

Responsibilities:

Conduct comprehensive security assessments, incorporating both static and dynamic application security testing methods.Perform manual penetration testing on web applications, network devices, and other systemsCollaborate with clients in a dynamic environment across various technology stacks and services, including cloud platforms and development technologiesDevelop, refine, and interpret security standards and guidanceDemonstrate and advocate for security best practices, including secure development and cloud security.Assist in developing remediation recommendations for identified findingsEffectively identify and communicate findings, both in writing and verbally, to senior management and clientsAssist in identifying improvement opportunities for assigned clients.Stay informed about current security trends, technologies, and best practicesFoster a collaborative environment by encouraging open communication and cooperation among team members to achieve shared goals and successful outcomesAssist in coordinating and supporting other team members working on assigned projects

Qualifications:

BS in Computer Science, Engineering, or related field or equivalent work experienceYears of experience in code review, application security testing, or web application developmentStrong written and verbal communication skillsProficient in scripting languages (e.g., Python, Ruby, Perl)Experience with cloud platforms, such as AWS, and knowledge of cloud security best practicesKnowledge of Docker, CDK, Terraform, Java, Python, React, GraphQL, Javascript, JSON, REST, etc.Possesses a technical background in application development, networking/system administration, security testing, or related disciplinesExperience with static application security testing (SAST) and dynamic application security testing (DAST) using a variety of tools and techniquesPreferred, though not mandatory, are one or more relevant certifications such as Offensive Security Web Assessor (OSWA), Offensive Security Web Expert (OSWE), Offensive Security Certified Professional (OSCP), Burp Suite Certified Practitioner, or AWS Certified Security Specialist.

At RSM, we offer a competitive benefits and compensation package for all our people.  We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients.  Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits   https://rsmus.com/careers/el-salvador.html. 

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.  

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at careers@rsmus.com.