Penetration Testing Expert, Hybrid UK Career Growth

Citation Cyber; Bradley Stoke; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

NCSC CHECK provider

CREST member

Hybrid and flexible working

Funded training and industry certs

Competitive salary and benefits

Job summary

Citation Cyber in the UK is seeking a Security Consultant (Penetration Testing) to join a hybrid team delivering security assessments across client environments. You will conduct infrastructure and web tests, produce high-quality reports, and present remediation guidance to clients while supporting vulnerability validation and re-testing.

As a CREST and NCSC CHECK provider, the role offers ongoing professional development, exposure to varied projects (public, defence and private sector), and

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing
• Cloud security assessments
• Producing clear, high-quality technical reports
• Presenting findings and remediation advice to clients
• Supporting vulnerability validation and re-testing
• Contributing to internal tooling, research and knowledge sharing

Skills

Penetration testing

Technical reporting

Infra & web tests

Windows/Linux/AD

Cloud security testing

Penetration testing tools

Communication

Continuous learning

Job description

Citation Cyber in the UK is seeking a Security Consultant (Penetration Testing) to join a hybrid team delivering security assessments across client environments. You will conduct infrastructure and web tests, produce high-quality reports, and present remediation guidance to clients while supporting vulnerability validation and re-testing.

As a CREST and NCSC CHECK provider, the role offers ongoing professional development, exposure to varied projects (public, defence and private sector), and