Security Consultant: Pen Testing & Growth (Hybrid UK)

Citation Cyber; Doncaster; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join their hybrid UK team. You will perform infrastructure and web app pentests, produce detailed reports, and present remediation guidance to clients across public and private sectors.

Ideal candidates have consultancy-based pentest experience, strong reporting, and a passion for continuous learning, with familiarity in Windows/Linux/AD and cloud security testing (Azure/AWS).

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and strengthen client cyber resilience.
• Conduct infrastructure and web app penetration tests.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Reporting

Infrastructure testing

Web app testing

Windows

Linux

Active Directory

Azure security testing

AWS security testing

Penetration testing tools

Communication

Continuous learning

Tools

Industry-standard tools

Job description

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join their hybrid UK team. You will perform infrastructure and web app pentests, produce detailed reports, and present remediation guidance to clients across public and private sectors.

Ideal candidates have consultancy-based pentest experience, strong reporting, and a passion for continuous learning, with familiarity in Windows/Linux/AD and cloud security testing (Azure/AWS).