Security Consultant: Penetration Testing & Cloud Security

Citation Cyber; City of Edinburgh; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid and flexible working

Funded training and industry certs

CHECK provider status

Job summary

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our expanding team. You'll deliver a range of security assessments across client environments, identifying vulnerabilities and helping strengthen cyber resilience in hybrid UK engagements.

The role requires experience in infrastructure and web app testing, reporting, and presenting findings, with exposure to Azure/AWS security. We value ongoing learning and CREST/ CHECK credentials.

Qualifications

• Essential: commercial penetration testing experience in consultancy or equivalent.
• Essential: strong technical reporting skills.
• Essential: infra and web app pen tests.
• Essential: good Windows/Linux/AD understanding.
• Essential: Azure and/or AWS security testing experience.
• Essential: experience with industry-standard PT tools and methodologies.
• Essential: excellent written and verbal communication.
• Essential: passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and help strengthen client cyber resilience.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Windows environments

Linux environments

Active Directory

Azure security testing

AWS security testing

Penetration testing tools

Communication skills

Continuous learning

Tools

Burp Suite

Nessus

Metasploit

OWASP testing tools

Job description

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our expanding team. You'll deliver a range of security assessments across client environments, identifying vulnerabilities and helping strengthen cyber resilience in hybrid UK engagements.

The role requires experience in infrastructure and web app testing, reporting, and presenting findings, with exposure to Azure/AWS security. We value ongoing learning and CREST/ CHECK credentials.