Hybrid Cybersecurity Penetration Tester (UK)

Accenture; City Of London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Certification pathway

Job summary

Accenture is seeking a Cyber Security Penetration Testing Consultant to perform hands-on testing of client web applications, APIs and infrastructure across the UK, with hybrid work (office 1x per month). You will work in a collaborative team, delivering vulnerability identification, risk-based remediation advice and retests to verify fixes.

The role offers a pathway to CHECK and Red Team engagements, mentoring from senior testers, and a funded certification pathway.

Qualifications

• 2–4 years' commercial penetration testing experience across web applications, APIs and infrastructure.
• Practitioner-level certifications such as CREST CRT, Cyber Scheme CSTM or OSCP are desirable.
• Good working knowledge of common web and API vulnerabilities, including OWASP Top 10 and API Top 10.
• Sound understanding of networking, protocols, and Windows/Linux security.
• Experience with Burp Suite, Nmap and Metasploit.

Responsibilities

• Perform manual and tool-assisted testing of web applications, APIs and internal and external infrastructure.
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement, including authentication, authorisation, injection, business logic and misconfiguration issues.
• Help identify attack paths, including privilege escalation, and explain their business impact.
• Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards.
• Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead.
• Write clear, accurate reports with reproducible evidence, risk ratings and prioritised remediation advice.
• Support client remediation and carry out retests to confirm fixes are effective.
• Escalate critical findings promptly to the engagement lead and help explain their impact to stakeholders.
• Share knowledge with the team through peer review, tooling improvements and technical write-ups.

Skills

Penetration testing

Web and API security testing

Technical writing

Networking fundamentals

Windows/Linux security

Education

CREST CRT

Cyber Scheme CSTM

OSCP

Tools

Burp Suite

Nmap

Metasploit

Job description

Accenture is seeking a Cyber Security Penetration Testing Consultant to perform hands-on testing of client web applications, APIs and infrastructure across the UK, with hybrid work (office 1x per month). You will work in a collaborative team, delivering vulnerability identification, risk-based remediation advice and retests to verify fixes.

The role offers a pathway to CHECK and Red Team engagements, mentoring from senior testers, and a funded certification pathway.