Penetration Tester

Accenture Federal Services•Washington, DC

1d•$126,300 - $243,100

About The Position

We are seeking a Penetration Tester to design, coordinate, and execute a modern, scalable penetration‑testing program. This role will unify penetration‑testing activities across network, application, and cloud environments, ensuring consistent execution, standardized reporting, and alignment with enterprise security and risk‑management objectives. The Pen Tester will also guide the integration of automated and AI‑assisted testing capabilities into the organization’s Agentic AI architecture, improving speed, accuracy, and repeatability of offensive security operations.

Requirements

Two years of Penetration-Testing experience
Hands‑on penetration‑testing experience across at least two of the following domains: network, cloud, web application, identity, or containerized environments.
Experience operating within defined Rules of Engagement.
Proficiency with common offensive‑security tools (e.g., Burp Suite, Cobalt Strike, Metasploit, BloodHound).
Ability to produce high‑quality technical documentation, findings reports, and remediation guidance.

Nice To Haves

Experience developing custom exploits, automation scripts, or AI‑augmented testing workflows.
Familiarity integrating tooling into agent‑based or Agentic AI architectures.
Prior experience leading penetration‑testing teams or programs.
Industry certifications such as OSCP, OSWE, OSEP, CRTO, GPEN, or equivalent.

Responsibilities

Consolidate ad‑hoc penetration‑testing efforts into a unified enterprise pen‑testing program with standard methodologies, processes, and reporting.
Establish and maintain Rules of Engagement (ROE) for all testing activities, defining scope, communication protocols, safety constraints, escalation paths, and evidence‑handling guidelines.
Coordinate and supervise all test execution activities, including internal teams, contractors, and third‑party assessors.
Plan and execute network, application, and cloud penetration tests under the approved ROE.
Combine manual tradecraft with AI‑assisted offensive‑security tooling to increase depth and coverage of assessments.
Produce detailed evidence packages, exploitation artifacts, and findings reports that support remediation and root‑cause analysis.
Work with product teams, system owners, and DevSecOps/Cloud teams to validate findings and retest fixes.
Integrate penetration‑testing tools, automation frameworks, and exploit‑development workflows into the Agentic AI security architecture.
Recommend tooling enhancements, AI‑driven analysis approaches, and automation opportunities.
Conduct technical risk assessments across systems to determine likelihood, impact, and exploitation feasibility.
Analyze risk vectors to prioritize vulnerabilities and perform triage across multiple findings sources (manual, automated, AI‑assisted, third‑party).
Partner with vulnerability‑management, SOC, threat‑intelligence, and engineering teams to drive remediation activities.