Penetration Tester
Accenture Federal Services
$106,300 - $206,200 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Provides penetration testing support to the Agency's information systems in support of Security Controls Assessments, Accreditation activities, continuous monitoring, and FISMA requirements, including specialized wireless, RF, mobile application, and High Value Asset (HVA) assessments. Every engagement begins with a Rules of Engagement (ROE) package submitted for Government approval and ends with a detailed findings report delivered to the System Owner, ISSM/ISSO, Government lead, and the Agency's SOC/VAT Manager to support remediation and retesting. The role also supports Adversarial Assessments — including Cyber Table-Top (CTT) scenarios and Cooperative Vulnerability Penetration Assessments (CVPA) — conducted jointly with the SOC, CTI, and CDF teams to emulate real-world IOCs, TTPs, and CWEs. Testing frequently requires CONUS/OCONUS travel to the Agency's facilities nationwide, including Puerto Rico and Guam, for onsite wireless, RF, and physical-security assessments.
Role Description
- Perform penetration testing as requested by Components/System Owners/ISSM/ISSO; prepare and submit Rules of Engagement (ROE) for Government approval prior to testing.
- Deliver detailed findings/recommendations reports to System Owners, ISSM/ISSO, Government lead, and the Agency's VAT/SOC Manager; archive data to support remediation and retesting.
- Conduct wireless access point assessments (IEEE 802.11) and RF assessments (~300 MHz–6 GHz) at the Agency's sites nationwide, including Puerto Rico and Guam, maintaining a master travel/assessment schedule.
- Perform mobile application assessments and Non-Tier 1 HVA assessments, including the CISA Operator Role portion, generating reports in CISA-prescribed format.
- Support Adversarial Assessments (AA): initial engagement meetings, Cyber Table-Top (CTT) scenario creation/execution, and Cooperative Vulnerability Penetration Assessments (CVPA).
- Conduct assessments jointly with SOC/CTI/CDF to discover or emulate IOCs, TTPs, and CWEs.
- Travel CONUS/OCONUS as needed to perform onsite security assessments of the Agency's facilities, systems, and applications.
- Maintain a repository and metrics tracking of past penetration tests; support annual ISSO training on VAT services/capabilities.
Basic Qualifications:
- Minimum 7 years of professional experience in penetration testing and offensive security assessment; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field 5 years of such experience.
- Hands-on experience with penetration testing methodologies, wireless/RF assessment tools, mobile application security testing, and CISA HVA assessment procedures.
Preferred Certifications:
- OSCP (Offensive Security Certified Professional)
- GPEN (GIAC Penetration Tester)
- CEH (Certified Ethical Hacker)
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
About this role
Accenture Federal Services is seeking a Penetration Tester to conduct security assessments across federal agency information systems in Washington, DC. You would perform hands-on penetration testing to support FISMA compliance, accreditation activities, and continuous monitoring efforts. The work spans multiple specialized domains—wireless and RF assessments, mobile applications, and High Value Asset evaluations—with each engagement requiring formal Rules of Engagement approval and culminating in detailed findings reports delivered to system owners and security teams.
The role demands significant travel throughout CONUS and OCONUS locations, including Puerto Rico and Guam, to conduct onsite assessments at agency facilities. Beyond traditional penetration testing, you would support adversarial assessments and cyber table-top exercises alongside SOC and threat intelligence teams, helping to identify and emulate real-world attack patterns and techniques. You'll also maintain testing repositories, track metrics, and contribute to annual security training.
This position requires a minimum of seven years in penetration testing and offensive security (or five years with a relevant bachelor's degree), with demonstrated proficiency in penetration testing methodologies, wireless/RF tools, mobile application security, and CISA HVA procedures. Certifications such as OSCP, GPEN, or CEH are preferred. The salary range is $106,300–$206,200, and the role is full-time, in-office based in Washington, DC.
How this employer is doing
average
- News: Growing or Expanding
This role's local market on JobMinglr
Pay for this role
$106,300 to $206,200 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.