Penetration Tester: Web & API Security (Hybrid UK)

Accenture PLC; Birmingham; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Mentoring and training support

Certification pathway (CRT/CSTM)

Job summary

Accenture PLC in the United Kingdom is seeking a Cyber Security Penetration Testing Consultant to deliver hands-on testing of client web apps, APIs, and infrastructure. You will work within a collaborative team, supported by senior testers and CHECK Team Leaders, and advance toward industry certifications and CHECK/CREST engagements.

The role requires 2–4 years of commercial pentesting experience and practitioner-level certifications.

Qualifications

• 2–4 years of commercial penetration testing experience across web apps, APIs, and infrastructure.
• Practitioner-level certifications such as CREST CRT, Cyber Scheme CSTM, or OSCP.

Responsibilities

• Perform manual and tool-assisted testing of web apps, APIs, and infrastructure.
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement.
• Write clear, reproducible reports with risk ratings and remediation guidance.
• Support client remediation and carry out retests to verify fixes.
• Escalate critical findings to engagement lead and communicate impact to stakeholders.

Skills

Penetration testing

Vulnerability assessment

Risk assessment

Report writing

Technical writing

Team collaboration

Security concepts

Education

CREST CRT

Cyber Scheme CSTM

OSCP

Tools

Burp Suite

Nmap

Metasploit

Job description

Accenture PLC in the United Kingdom is seeking a Cyber Security Penetration Testing Consultant to deliver hands-on testing of client web apps, APIs, and infrastructure. You will work within a collaborative team, supported by senior testers and CHECK Team Leaders, and advance toward industry certifications and CHECK/CREST engagements.

The role requires 2–4 years of commercial pentesting experience and practitioner-level certifications.