Penetration Tester – Web Apps & APIs (Hybrid UK)

Accenture PLC; Greater London; Hybrid; GBP 42.000 - 65.000; Vollzeit

Zusammenfassung

Accenture PLC is seeking a Cyber Security Penetration Tester to perform hands-on security testing of client web applications, APIs and infrastructure across the UK. You will work within a collaborative testing team, guided by senior testers and CHECK Team Leaders on complex engagements, delivering clear remediation advice.

This role suits an early-career tester looking to broaden technical skills and pursue recognised industry certifications while working in a hybrid model (1 day a month in the

Qualifikationen

• Typically 1–2 years' commercial penetration testing experience.
• Good working knowledge of web and API vulnerabilities, including the OWASP Top 10.
• Experience with Burp Suite, Nmap and Metasploit.
• Ability to validate findings and capture reproducible evidence.
• Clear technical writing that explains risk and remediation.

Aufgaben

• Perform manual and tool-assisted testing of web applications, APIs and internal and external infrastructure.
• Identify, validate and safely exploit vulnerabilities within agreed rules of engagement, including authentication, authorisation, injection, business logic and misconfiguration issues.
• Help identify attack paths, including privilege escalation, and explain their business impact.
• Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards.
• Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead.
• Write clear, accurate reports with reproducible evidence, risk ratings and prioritised remediation advice.
• Support client remediation and carry out retests to confirm fixes are effective.
• Escalate critical findings promptly to the engagement lead and help explain their impact to stakeholders.
• Share knowledge with the team through peer review, tooling improvements and technical write-ups.

Kenntnisse

Penetration testing

OWASP Top 10

Technical writing

Threat modelling

Security reporting

Tools

Burp Suite

Nmap

Metasploit

Jobbeschreibung

Accenture PLC is seeking a Cyber Security Penetration Tester to perform hands-on security testing of client web applications, APIs and infrastructure across the UK. You will work within a collaborative testing team, guided by senior testers and CHECK Team Leaders on complex engagements, delivering clear remediation advice.

This role suits an early-career tester looking to broaden technical skills and pursue recognised industry certifications while working in a hybrid model (1 day a month in the