This job has closed.

Accenture Federal Services · 1 day ago

Pentester III

Washington, DC

Full-time

Onsite

Mid, Senior Level

$126K/yr - $243K/yr

5+ years exp

Accenture Federal Services is a technology company dedicated to enhancing the capabilities of the US federal government. The Pentester III role involves planning and conducting penetration tests on networks and web applications, while leveraging threat intelligence to improve the organization’s security posture.

ConsultingFinanceInformation TechnologyManagement ConsultingOnline PortalsProfessional Services

No H1B

U.S. Citizen Only

Responsibilities

Candidates must possess demonstrated experience planning and conducting penetration tests against networks and web applications

Solid understanding of exploitation concepts including phishing and social engineering tactics, buffer overflows, fuzzing, covert channels, and data exfiltration

Perform infrastructure penetration testing to discover and exploit vulnerabilities to test the effectiveness of the organization’s security posture

Perform web application penetration testing to identify and exploit OWASP Top 10 web application vulnerabilities

Leverage threat intelligence to emulate known threat actors’ tactics, techniques, and procedures

Expertise with tools such as Bloodhound, Burp Suite, Cobalt Strike, Metasploit, and Mimikatz

Develop process automation and penetration testing scripts

Partner with various cybersecurity teams to improve automation and detection of threat actors

Engage with technical and non-technical audiences to articulate both techniques and results

Qualification

Penetration TestingExploitation ConceptsThreat IntelligenceSecurity MethodologiesAutomation ScriptingCybersecurity CollaborationTeam Assessment KnowledgeTechnical EngagementNon-Technical EngagementCommunication Skills

Required

Bachelor's Degree

At least five (5) years of pen test experience

Knowledge of red, blue, and purple team assessments

Experience with OSSTMM, OWASP, NIST, PTES, ISSAF methodologies

Experience with a variety of toolsets for gathering information and conduct comprehensive penetration tests

Must have at least a CEH, PenTest+, or GPEN certification in addition to one of the following certifications: GXPN, OSCP, CRTOP, CMWAPT, CEPT, CPT, LPT or other similar certifications as approved by the Government (e.g., C|PENT)

US Citizen