Security Consultant: Penetration Testing & Cloud Security

Citation Cyber; Normanton on Trent; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Funded training and certifications

Competitive salary and benefits

Clear progression to CHECK roles

Research and tooling opportunities

Job summary

Citation Cyber in the UK is seeking a Security Consultant to join our penetration testing team. You'll deliver a range of technical security assessments across client environments, identifying vulnerabilities and strengthening cyber resilience.

The role covers infrastructure and web app testing, cloud security assessments, and producing clear reports. You'll present findings to clients and help with remediation while contributing to internal tooling and knowledge sharing.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing
• Cloud security assessments
• Producing clear, high-quality technical reports
• Presenting findings and remediation advice to clients
• Supporting vulnerability validation and re-testing
• Contributing to internal tooling, research and knowledge sharing

Skills

Penetration testing

Technical reporting

Cloud security testing

Windows/Linux/AD

Tools

OWASP methods

Job description

Citation Cyber in the UK is seeking a Security Consultant to join our penetration testing team. You'll deliver a range of technical security assessments across client environments, identifying vulnerabilities and strengthening cyber resilience.

The role covers infrastructure and web app testing, cloud security assessments, and producing clear reports. You'll present findings to clients and help with remediation while contributing to internal tooling and knowledge sharing.