Cyber Security Penetration Testing Consultant

Overview

In this role you will perform hands-on security testing of client web applications, APIs and infrastructure, working within a collaborative testing team supported by senior testers. You will identify vulnerabilities, demonstrate their real-world impact and provide clear remediation guidance to clients. The position offers a path to broader certifications and CHECK/Red Team work, shaping security outcomes across engagements. You will contribute to reusable methodologies and share knowledge with the team, helping elevate testing quality and impact across Accenture’s client base.

Responsibilities

• Perform manual and tool-assisted testing of web applications, APIs and internal/external infrastructure
• Identify, validate and safely exploit vulnerabilities within rules of engagement (authentication, authorization, injection, business logic, misconfiguration)
• Identify attack paths, including privilege escalation, and explain business impact
• Follow OWASP WSTG, API Security Top 10, PTES, and CHECK/CREST standards
• Prepare engagements by confirming scope, access and prerequisites with engagement lead
• Write clear reports with reproducible evidence, risk ratings and remediation priorities
• Support remediation and conduct retests to verify fixes
• Escalate critical findings to engagement lead and explain impact to stakeholders
• Share knowledge through peer review, tooling improvements and technical write-ups

Key requirements

• 2-4 years' commercial penetration testing experience across web apps, APIs and infrastructure
• Practitioner-level certification such as CREST CRT, Cyber Scheme CSTM, OSCP
• Good knowledge of common web and API vulnerabilities (OWASP Top 10, API Top 10)
• Networking, protocols, Windows and Linux security understanding
• Experience with Burp Suite, Nmap and Metasploit
• Ability to validate findings, rule out false positives and capture reproducible evidence
• Clear technical writing to explain risk and remediation

• Curiosity and continuous learning
• Strong written communication
• Critical thinking and problem solving
• Burp Suite
• Nmap
• Metasploit

Full job description from WhatJobs. Apply for this role →