Penetration Tester - Web, API & Infra (Hybrid UK)

Accenture UK; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Accenture is seeking a Cyber Security Penetration Testing Consultant to deliver hands-on testing of client web applications, APIs and infrastructure across the UK. You will join a collaborative testing team and work toward CHECK and Red Team engagements.

Essential: typically 2–4 years of commercial penetration testing across web apps, APIs and infrastructure; practitioner-level certs such as CREST CRT, Cyber Scheme CSTM or OSCP; familiarity with Burp Suite, Nmap and Metasploit.

Qualifications

• Typically 2–4 years of commercial penetration testing across web applications, APIs and infrastructure.
• Certifications such as CREST CRT, Cyber Scheme CSTM or OSCP.
• Knowledge of OWASP Top 10 and API Security Top 10.
• Experience with reporting and remediation guidance.

Responsibilities

• Perform manual and tool-assisted testing of web applications, APIs and infrastructure.
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement.
• Help identify attack paths and explain their business impact.
• Follow recognised methodologies and industry standards.
• Prepare for engagements by confirming scope with the engagement lead.
• Write clear reports with reproducible evidence, risk ratings and remediation guidance.
• Support client remediation and carry out retests to confirm fixes.
• Escalate critical findings to the engagement lead and stakeholders.
• Share knowledge with the team through peer reviews and tooling improvements.

Skills

Penetration testing

Burp Suite

Nmap

Metasploit

OWASP Top 10

Windows security

Linux security

Reporting skills

CREST CRT

OSCP

Tools

Burp Suite

Nmap

Metasploit

Job description

Accenture is seeking a Cyber Security Penetration Testing Consultant to deliver hands-on testing of client web applications, APIs and infrastructure across the UK. You will join a collaborative testing team and work toward CHECK and Red Team engagements.

Essential: typically 2–4 years of commercial penetration testing across web apps, APIs and infrastructure; practitioner-level certs such as CREST CRT, Cyber Scheme CSTM or OSCP; familiarity with Burp Suite, Nmap and Metasploit.