Cyber Security Penetration Testing Consultant

Overview

As a Penetration Tester at Accenture, you will conduct hands-on security testing of client web apps, APIs and infrastructure, collaborating with a skilled testing team and CHECK Team Leaders. You’ll identify, demonstrate impact, and provide practical remediation guidance to clients, helping to advance complex engagements and security assurance. The role supports growing your technical breadth toward CHECK and Red Team assessments within a supportive learning environment. You will work across diverse projects and contribute to shared tooling and methodologies, balancing delivery with continuous improvement.

Pay / Benefits

• funded certification pathway
• dedicated training and lab time
• mentoring and technical guidance
• opportunities to contribute to tooling and methodology
• hybrid work arrangement
• career development in security testing

Responsibilities

• Perform manual and tool-assisted testing of web applications, APIs and internal/external infrastructure
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement (authentication, authorization, injection, business logic, misconfigurations)
• Identify attack paths including privilege escalation and explain business impact
• Follow OWASP WSTG, API Security Top 10, PTES, CHECK/CREST standards
• Prepare for engagements by confirming scope, access and prerequisites with the engagement lead
• Write clear, reproducible reports with risk ratings and remediation guidance
• Support remediation and conduct retests to verify fixes
• Escalate critical findings to the engagement lead and explain impact to stakeholders
• Share knowledge via peer review, tooling improvements and technical write-ups

Key requirements

• Typically 2-4 years’ commercial penetration testing experience across web apps, APIs and infrastructure
• Practitioner-level certification such as CREST CRT, Cyber Scheme CSTM, OSCP (holding or working towards)
• Knowledge of common web and API vulnerabilities (OWASP Top 10, API Security Top 10)
• Understanding of networking, protocols, Windows and Linux security
• Experience with Burp Suite, Nmap, Metasploit
• Ability to validate findings, rule out false positives and provide reproducible evidence
• Clear technical writing explaining risk and remediation

• Curious mindset
• Strong written communication
• Collaborative teamwork
• Burp Suite
• Nmap
• Metasploit

…