Penetration Testing Consultant — Web, API & Infra

Remote Worker LTD.; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Accenture is seeking a Cyber Security Penetration Testing Consultant to deliver hands‑on testing of client web apps, APIs and infrastructure across UK sites. You’ll work within a collaborative team, supported by senior testers, delivering vulnerabilities with remediation guidance and contributing to CHECK/Red Team ambitions.

The role offers UK‑wide hybrid work (office once a month) and a pathway toward security certifications, with opportunities to grow expertise in CHECK and public sector work.

Qualifications

• 2–4 years of commercial penetration testing experience across web applications, APIs and infrastructure.
• Practical certification at practitioner level (e.g., CREST CRT, Cyber Scheme CSTM, OSCP).
• Good working knowledge of common web and API vulnerabilities, including OWASP Top 10 and API Security Top 10.
• Understanding of networking, protocols, and Windows/Linux security.
• Experience with Burp Suite, Nmap and Metasploit; ability to validate findings and produce evidence.

Responsibilities

• Perform manual and tool‑assisted testing of web applications, APIs and infrastructure.
• Identify, validate and safely exploit vulnerabilities within engagement rules of engagement.
• Identify attack paths and explain business impact to stakeholders.
• Follow OWASP, PTES, CHECK/CREST standards in testing.
• Prepare for engagements by confirming scope and prerequisites with the lead.
• Write clear reports with reproducible evidence, risk ratings and remediation advice.
• Support remediation and carry out retests to verify fixes.
• Escalate critical findings and explain impact to stakeholders.
• Share knowledge through peer review and tooling improvements.

Skills

Penetration testing

OWASP Top 10

Tool proficiency

Report writing

Tools

Burp Suite

Nmap

Metasploit

Job description

Accenture is seeking a Cyber Security Penetration Testing Consultant to deliver hands‑on testing of client web apps, APIs and infrastructure across UK sites. You’ll work within a collaborative team, supported by senior testers, delivering vulnerabilities with remediation guidance and contributing to CHECK/Red Team ambitions.

The role offers UK‑wide hybrid work (office once a month) and a pathway toward security certifications, with opportunities to grow expertise in CHECK and public sector work.