Penetration Tester

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.    Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.    Join us to drive positive, lasting change that moves missions and the government forward!  

Provides penetration testing support to the Agency's information systems in support of Security Controls Assessments, Accreditation activities, continuous monitoring, and FISMA requirements, including specialized wireless, RF, mobile application, and High Value Asset (HVA) assessments. Every engagement begins with a Rules of Engagement (ROE) package submitted for Government approval and ends with a detailed findings report delivered to the System Owner, ISSM/ISSO, Government lead, and the Agency's SOC/VAT Manager to support remediation and retesting. The role also supports Adversarial Assessments — including Cyber Table-Top (CTT) scenarios and Cooperative Vulnerability Penetration Assessments (CVPA) — conducted jointly with the SOC, CTI, and CDF teams to emulate real-world IOCs, TTPs, and CWEs. Testing frequently requires CONUS/OCONUS travel to the Agency's facilities nationwide, including Puerto Rico and Guam, for onsite wireless, RF, and physical-security assessments.

Role Description

• Perform penetration testing as requested by Components/System Owners/ISSM/ISSO; prepare and submit Rules of Engagement (ROE) for Government approval prior to testing.
• Deliver detailed findings/recommendations reports to System Owners, ISSM/ISSO, Government lead, and the Agency's VAT/SOC Manager; archive data to support remediation and retesting.
• Conduct wireless access point assessments (IEEE 802.11) and RF assessments (~300 MHz–6 GHz) at the Agency's sites nationwide, including Puerto Rico and Guam, maintaining a master travel/assessment schedule.
• Perform mobile application assessments and Non-Tier 1 HVA assessments, including the CISA Operator Role portion, generating reports in CISA-prescribed format.
• Support Adversarial Assessments (AA): initial engagement meetings, Cyber Table-Top (CTT) scenario creation/execution, and Cooperative Vulnerability Penetration Assessments (CVPA).
• Conduct assessments jointly with SOC/CTI/CDF to discover or emulate IOCs, TTPs, and CWEs.
• Travel CONUS/OCONUS as needed to perform onsite security assessments of the Agency's facilities, systems, and applications.
• Maintain a repository and metrics tracking of past penetration tests; support annual ISSO training on VAT services/capabilities.