Penetration Tester

Citation Cyber; City of Edinburgh; Híbrido; GBP 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid and flexible working

Funded training and industry certs

CHECK provider status

Descripción de la vacante

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our expanding team. You'll deliver a range of security assessments across client environments, identifying vulnerabilities and helping strengthen cyber resilience in hybrid UK engagements.

The role requires experience in infrastructure and web app testing, reporting, and presenting findings, with exposure to Azure/AWS security. We value ongoing learning and CREST/ CHECK credentials.

Formación

• Essential: commercial penetration testing experience in consultancy or equivalent.
• Essential: strong technical reporting skills.
• Essential: infra and web app pen tests.
• Essential: good Windows/Linux/AD understanding.
• Essential: Azure and/or AWS security testing experience.
• Essential: experience with industry-standard PT tools and methodologies.
• Essential: excellent written and verbal communication.
• Essential: passion for continuous learning and technical development.

Responsabilidades

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and help strengthen client cyber resilience.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Conocimientos

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Windows environments

Linux environments

Active Directory

Azure security testing

AWS security testing

Penetration testing tools

Communication skills

Continuous learning

Herramientas

Burp Suite

Nessus

Metasploit

OWASP testing tools

Descripción del empleo

Security Consultant (Penetration Testing)

Location: Hybrid (UK)

Salary: Competitive + Benefits

Security Clearance: Current SC preferred

About Citation Cyber

Citation Cyber is one of the UK's leading cyber security consultancies, delivering penetration testing, Cyber Essentials certification, consultancy, training and managed cyber security services to organisations across both the public and private sectors.

As an NCSC CHECK provider and CREST member company, we're continuing to grow our penetration testing team and are looking for a talented Security Consultant to join us.

Whether you're already a CHECK Team Member (CTM) or you're an experienced penetration tester ready to take that next step, we'd love to hear from you.

The Role

You'll work as part of our penetration testing team delivering a wide range of technical security assessments across client environments, helping organisations identify vulnerabilities and strengthen their cyber resilience.

Your work will include:

• Infrastructure or Web application penetration testing
• Cloud security assessments
• Producing clear, high-quality technical reports
• Presenting findings and remediation advice to clients
• Supporting vulnerability validation and re-testing
• Contributing to internal tooling, research and knowledge sharing

What we're looking for

Essential

• Commercial penetration testing experience within a consultancy or equivalent environment
• Strong technical reporting skills
• Experience conducting infrastructure and web application penetration tests
• Good understanding of Windows, Linux and Active Directory environments
• Familiarity with Azure and/or AWS security testing
• Experience using industry-standard penetration testing tools and methodologies
• Excellent written and verbal communication skills
• A passion for continuous learning and technical development

Desirable

• Current CHECK Team Member (CTM) status
• Current SC Security Clearance (or eligibility to obtain it)
• CREST CRT / Cyber Scheme CSTM or equivalent certification
• OSCP or equivalent practical penetration testing certification
• Experience with API, mobile or wireless security testing
• Scripting or automation experience using Python, PowerShell or Bash

Why Join Citation Cyber?

We're building a consultancy where technical excellence, innovation and professional development go hand in hand.

When you join us you'll benefit from:

• Working for an NCSC CHECK provider and CREST member
• A varied mix of commercial, defence and public sector projects
• Funded training and industry certifications
• Clear progression towards CHECK Team Member, CHECK Team Leader and senior technical roles
• Hybrid and flexible working
• A collaborative technical culture where knowledge sharing is encouraged
• Opportunities to contribute to research, tooling and new service development
• Competitive salary and benefits

About You

You're passionate about offensive security and enjoy solving complex technical challenges. You produce high-quality work, communicate clearly with clients and are always looking to improve your skills.

Whether you're already delivering CHECK assessments or you're looking to achieve CHECK status in the near future, you'll be joining a team that will support your professional development and provide exposure to challenging and rewarding engagements.