Accenture
Cyber Security Penetration Tester

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Penetration Tester
Locations: UK wide (hybrid work - 1x a month in office)
Salary: Competitive salary and package (Depending on level of experience)
Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application.
Role overview
As a Penetration Tester, you will deliver hands-on security testing of client web applications, APIs and infrastructure. Working within a collaborative testing team, and supported by senior testers and CHECK Team Leaders on complex engagements, you will find and validate vulnerabilities, demonstrate their real-world impact and give clients clear, practical remediation advice. This role suits an early-career tester who wants to broaden their technical skills and progress through recognised industry certifications.
Key responsibilities
- Perform manual and tool-assisted testing of web applications, APIs and internal and external infrastructure.
- Identify, validate and safely exploit vulnerabilities within agreed rules of engagement, including authentication, authorisation, injection, business logic and misconfiguration issues.
- Help identify attack paths, including privilege escalation, and explain their business impact.
- Follow recognised methodologies, including OWASP (WSTG, API Security Top 10), PTES and CHECK/CREST standards.
- Help prepare for engagements by confirming scope, access and prerequisites with the engagement lead.
- Write clear, accurate reports with reproducible evidence, risk ratings and prioritised remediation advice.
- Support client remediation and carry out retests to confirm fixes are effective.
- Escalate critical findings promptly to the engagement lead and help explain their impact to stakeholders.
- Share knowledge with the team through peer review, tooling improvements and technical write-ups.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential skills and experience
- Typically 1–2 years' commercial penetration testing experience across web applications, APIs and infrastructure.
- Good working knowledge of common web and API vulnerabilities, including the OWASP Top 10 and API Security Top 10.
- Practical experience with industry-standard tools such as Burp Suite, Nmap and Metasploit.
- Ability to validate findings, rule out false positives and capture reproducible evidence.
- Clear technical writing that explains risk and remediation in plain language.
Desirable skills and experience
- Awareness of cloud security and configuration review in AWS, Azure or GCP.
- Some mobile application testing experience (iOS and/or Android).
- Basic scripting (e.g. Python, Bash, PowerShell) to automate tasks or adapt tools.
- Understanding of cryptography and build/hardening standards.
- Sound understanding of networking, common protocols, and Windows and Linux security.
- Holds, or is working towards, a practitioner-level certification such as CREST CRT, Cyber Scheme CSTM, OSCP or PNPT.
Development and support
- Mentoring and technical guidance from experienced testers and CHECK Team Leaders.
- A funded certification pathway, for example from CRT or CSTM through to CCT or CSTL.
- A broad mix of engagements to build experience across testing types.
- Dedicated time for training, research and lab work.
- Opportunities to contribute to internal tooling, methodology and innovation projects.
About Accenture


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.
Visit us at www.accenture.com
Equal Employment Opportunity Statement
We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London