{"id":57307,"url":"https://alion.io/job/rsm-penetration-tester","title":"Penetration Tester","company":{"id":8699,"name":"RSM US","domain":"rsmus.com","url":"https://alion.io/company/rsm","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":145,"ghost_share":0,"stale_share":0.697,"repost_share":0.007,"time_to_fill_p50_days":31,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Salvador, El Salvador"],"countries":["SV"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"GCP","optional":false},{"name":"GraphQL","optional":false},{"name":"JavaScript","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOAP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-13T00:00:00Z","employer_posted_date":"2026-09-11","last_verified_at":"2026-10-28T21:43:12Z","board_verified":true,"closed_at":null,"days_open":76,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":76},"description":"We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.\nThe Penetration Tester conducts authorized security assessments of applications, APIs, and network infrastructure to identify vulnerabilities and security weaknesses. Working closely with development, infrastructure, and security teams, the Penetration Tester leverages technical expertise, creativity, and an attacker mindset to identify and exploit weaknesses in internally developed and third-party systems.\nThe ideal candidate is responsible for performing security assessments, documenting findings, validating remediation efforts, and providing actionable recommendations based on industry best practices. The ideal candidate has experience with application and network penetration testing, a strong understanding of secure development principles, and familiarity with modern security testing methodologies including OWASP Top 10, SANS Top 25, and API security testing.\nResponsibilities\nPerform web application, API, and network security assessments.\n\nIdentify, exploit, and validate security vulnerabilities in applications and infrastructure.\n\nCreate test cases, document findings, and track remediation activities in Azure DevOps.\n\nProvide risk-based security recommendations and guidance to stakeholders.\n\nValidate remediation efforts and conduct retesting of previously identified vulnerabilities.\n\nResearch emerging threats, attack techniques, and industry security trends.\n\nAssist in developing and automating penetration testing methodologies and security processes.\n\nParticipate in the creation of technical and executive-level assessment reports.\n\nUtilize AI-assisted tools and techniques where appropriate to improve testing efficiency and coverage.\n\nPerform other duties as assigned.\n\nQualifications\nEDUCATION\nBachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent experience.\nCERTIFICATIONS (preferred)\nGPEN (GIAC Penetration Tester)\n\nCEH (Certified Ethical Hacker)\n\nSecurity+\n\nCISSP\n\nTECHNICAL SKILLS\nRequired\nExperience performing web application and network penetration testing.\n\nProficiency with Burp Suite Professional.\n\nUnderstanding of OWASP Top 10, SANS Top 25, and common attack methodologies.\n\nAbility to read, understand, and audit source code during source code-assisted penetration testing.\n\nStrong understanding of authentication, authorization, session management, and common application security vulnerabilities.\n\nExperience creating clear and actionable technical documentation and reports.\n\nExperience With:\nProgramming Languages: C#, Java, JavaScript, Python, or similar.\n\nScripting/Automation: Python, PowerShell, Bash, or equivalent.\n\nAPI Security Testing (REST, GraphQL, SOAP).\n\nAzure DevOps or similar ticketing and defect tracking platforms.\n\nLinux and Windows operating systems.\n\nCloud Platforms (Azure, AWS, or GCP).\n\nPreferred\nExperience testing AI-enabled applications and Large Language Model (LLM) integrations.\n\nFamiliarity with OWASP Top 10 for LLM Applications.\n\nExperience leveraging AI-assisted security testing tools and workflows.\n\nEXPERIENCE\nRequired\n3-5+ years of experience in penetration testing, application security, or cybersecurity engineering.\n\nExperience conducting application and network penetration tests in enterprise environments.\n\nExperience writing professional technical and executive-level security reports.\n\nLEADERSHIP & COMMUNICATION\nRequired\nStrong verbal and written communication skills.\n\nAbility to communicate technical findings to technical and non-technical audiences.\n\nStrong collaboration skills with Security Leads, Managers, Developers, and Infrastructure teams.\n\nAbility to manage multiple projects and meet deadlines in a fast-paced environment.\n\nStrong analytical, troubleshooting, and problem-solving skills.\n\nAt RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits https://rsmus.com/careers/el-salvador.html.\nRSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteranstatus; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.\nAccommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSMis committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at .","description_format":"text","description_chars":5766,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-08-13T00:00:00Z"},{"event":"close","at":"2026-09-01T22:29:04Z"},{"event":"reopen","at":"2026-09-11T19:04:50Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.344,"p_room":0.28,"age_days":76,"expected_fill_days":31,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/rsm-penetration-tester","json_url":"https://alion.io/job/rsm-penetration-tester.json","meta":{"generated_at":"2026-10-28T23:20:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31890,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8699},"rest":"https://alion.io/mcp/rest/get_company?id=8699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frsm-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frsm-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frsm-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rsm-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frsm-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":57307}},{"tool":"search_jobs","arguments":{"company":"rsmus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":57307},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}