Penetration Tester – Web, API & Infra (Hybrid UK)

Accenture UK; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Accenture is seeking a Cyber Security Penetration Tester to deliver hands-on testing of client web applications, APIs and infrastructure across the UK. You will work in a collaborative testing team with CHECK Team Leaders, performing manual and tool-assisted assessments, and delivering remediation advice.

Candidates typically have 1-2 years of experience, familiarity with Burp Suite, Nmap and Metasploit, and strong reporting skills. A pathway to security certifications is supported.

Qualifications

• Typically 1-2 years' commercial penetration testing experience across web applications, APIs and infrastructure.
• Good working knowledge of OWASP Top 10 and API Security Top 10.
• Practical experience with industry-standard tools such as Burp Suite, Nmap and Metasploit.
• Ability to validate findings, rule out false positives and capture reproducible evidence.
• Clear technical writing that explains risk and remediation in plain language.

Responsibilities

• Perform manual and tool-assisted testing of web applications, APIs and internal and external infrastructure.
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement, including authentication, authorisation, injection, business logic and misconfiguration issues.
• Help identify attack paths, including privilege escalation, and explain their business impact.
• Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards.
• Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead.
• Write clear, accurate reports with reproducible evidence, risk ratings and prioritised remediation advice.
• Support client remediation and carry out retests to confirm fixes are effective.
• Escalate critical findings promptly to the engagement lead and help explain their impact to stakeholders.
• Share knowledge with the team through peer review, tooling improvements and technical write-ups.

Skills

Penetration testing

OWASP Top 10

Burp Suite

Nmap

Metasploit

Evidence collection

Technical writing

Tools

Burp Suite

Nmap

Metasploit

Job description

Accenture is seeking a Cyber Security Penetration Tester to deliver hands-on testing of client web applications, APIs and infrastructure across the UK. You will work in a collaborative testing team with CHECK Team Leaders, performing manual and tool-assisted assessments, and delivering remediation advice.

Candidates typically have 1-2 years of experience, familiarity with Burp Suite, Nmap and Metasploit, and strong reporting skills. A pathway to security certifications is supported.