Penetration Testing Security Consultant (CHECK/SC)

Citation Cyber; Portsmouth; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing and related services. We are looking for a Security Consultant to join our CHECK-aligned penetration testing team, delivering assessments across client environments in a hybrid UK role.

You will conduct infrastructure and web app tests, report clearly, present findings to clients, and contribute to tooling and knowledge sharing as part of a collaborative technical culture.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and strengthen client cyber resilience.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Reporting skills

Infrastructure testing

Web application testing

Windows

Linux

Active Directory

Azure/AWS security

Tools & methodologies

Communication

Learning mindset

Job description

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing and related services. We are looking for a Security Consultant to join our CHECK-aligned penetration testing team, delivering assessments across client environments in a hybrid UK role.

You will conduct infrastructure and web app tests, report clearly, present findings to clients, and contribute to tooling and knowledge sharing as part of a collaborative technical culture.