Penetration Tester
Summary
Penetration Tester at Accenture Federal Services supporting a US federal agency: conducts penetration tests (network, wireless/RF, mobile app, and CISA High Value Asset assessments), prepares Rules of Engagement, delivers findings reports, and joins adversarial assessments with the SOC, with travel to agency sites nationwide including Puerto Rico and Guam.
Provides penetration testing support to the Agency's information systems in support of Security Controls Assessments, Accreditation activities, continuous monitoring, and FISMA requirements, including specialized wireless, RF, mobile application, and High Value Asset (HVA) assessments. Every engagement begins with a Rules of Engagement (ROE) package submitted for Government approval and ends with a detailed findings report delivered to the System Owner, ISSM/ISSO, Government lead, and the Agency's SOC/VAT Manager to support remediation and retesting. The role also supports Adversarial Assessments — including Cyber Table-Top (CTT) scenarios and Cooperative Vulnerability Penetration Assessments (CVPA) — conducted jointly with the SOC, CTI, and CDF teams to emulate real-world IOCs, TTPs, and CWEs. Testing frequently requires CONUS/OCONUS travel to the Agency's facilities nationwide, including Puerto Rico and Guam, for onsite wireless, RF, and physical-security assessments.
Role Description
- Perform penetration testing as requested by Components/System Owners/ISSM/ISSO; prepare and submit Rules of Engagement (ROE) for Government approval prior to testing.
- Deliver detailed findings/recommendations reports to System Owners, ISSM/ISSO, Government lead, and the Agency's VAT/SOC Manager; archive data to support remediation and retesting.
- Conduct wireless access point assessments (IEEE 802.11) and RF assessments (~300 MHz–6 GHz) at the Agency's sites nationwide, including Puerto Rico and Guam, maintaining a master travel/assessment schedule.
- Perform mobile application assessments and Non-Tier 1 HVA assessments, including the CISA Operator Role portion, generating reports in CISA-prescribed format.
- Support Adversarial Assessments (AA): initial engagement meetings, Cyber Table-Top (CTT) scenario creation/execution, and Cooperative Vulnerability Penetration Assessments (CVPA).
- Conduct assessments jointly with SOC/CTI/CDF to discover or emulate IOCs, TTPs, and CWEs.
- Travel CONUS/OCONUS as needed to perform onsite security assessments of the Agency's facilities, systems, and applications.
- Maintain a repository and metrics tracking of past penetration tests; support annual ISSO training on VAT services/capabilities.
Basic Qualifications:
- Minimum 7 years of professional experience in penetration testing and offensive security assessment; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field 5 years of such experience.
- Hands-on experience with penetration testing methodologies, wireless/RF assessment tools, mobile application security testing, and CISA HVA assessment procedures.
Preferred Certifications:
- OSCP (Offensive Security Certified Professional)
- GPEN (GIAC Penetration Tester)
- CEH (Certified Ethical Hacker)
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Skills
As published by greenhouse · 16 questions
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location
Short answers (1)
- If yes, please list the full name of the employee(s) and your relationship to them. optional
Pick from a list (15)
- State
- Are you at least 18 years of age?
- Are you legally authorized to work in the United States?
- Many AFS positions require US citizenship. Please indicate your citizenship status so we can determine eligibility for specific roles. optional
- Will you now or in the future require sponsorship for employment visa status (for example, H-1B visa status)?
- Have you entered into a non-disclosure or non-compete agreement or understanding of any kind?
- Have you worked at Accenture in the past?
- How did you hear about us?
- Do you hold a security clearance?
- At your current employer, are you currently working on a project with Accenture or have you worked on a project with Accenture in the past 24 months?
- Are you a current employee of the U.S. Government (including U.S. Congress or military) or any state or local government? This includes entities owned or controlled by the U.S. Federal Government, such as Amtrak, the United States Postal Service, and USAID (see list of exceptions below). NOTE: answer yes if you have accepted the “Fork-in-the-Road” offer, separated with a Deferred Retirement Plan, or are on administrative leave pending separation from the Government.
- Will you be serving as enlisted personnel in either the Reserves or the National Guard while working for AFS?
- Were you an employee of the U.S. Government (including U.S. Congress or military) or any state or local government within the past 10 years? This includes entities owned or controlled by the U.S. Federal Government, such as Amtrak, the United States Postal Service, and USAID (see list of exceptions below).
- Do you have any family members or people you have close relationships with who work for Accenture Federal Services?
- Affirmation