Penetration Tester - Security Consultant (Hybrid UK)

Citation Cyber; Watford; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Citation Cyber is seeking a Security Consultant to join our penetration testing team on a hybrid UK basis. You will deliver a range of technical security assessments across client environments, identifying vulnerabilities and strengthening cyber resilience.

The role requires practical experience in infrastructure and web app pentesting, strong reporting skills and the ability to communicate findings clearly to clients. A proactive, collaborative approach and ongoing learning are valued.

Qualifications

• Commercial penetration testing experience in a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing
• Cloud security assessments
• Producing clear, high-quality technical reports
• Presenting findings and remediation advice to clients
• Supporting vulnerability validation and re-testing
• Contributing to internal tooling, research and knowledge sharing

Skills

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Windows

Linux

Active Directory

Azure

AWS security testing

Pentesting tools

Communication

Continuous learning

Tools

CHECK Team Member (CTM)

Security clearance

CREST CRT / Cyber Scheme

OSCP

API testing

Mobile testing

Wireless testing

Scripting (Python)

PowerShell

Bash

Job description

Citation Cyber is seeking a Security Consultant to join our penetration testing team on a hybrid UK basis. You will deliver a range of technical security assessments across client environments, identifying vulnerabilities and strengthening cyber resilience.

The role requires practical experience in infrastructure and web app pentesting, strong reporting skills and the ability to communicate findings clearly to clients. A proactive, collaborative approach and ongoing learning are valued.