Security Consultant: Penetration Testing & Cloud Security

Citation Cyber; Norwich; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Hybrid working

Funded training & certifications

Clear progression toward CHECK roles

Competitive salary & benefits

Job summary

Citation Cyber, a leading UK cyber security consultancy, is hiring a Security Consultant (Penetration Testing) to join its hybrid UK team. You will deliver security assessments across client environments, including infrastructure and web applications, and help strengthen client security postures.

The role emphasizes producing high-quality reports, presenting findings, and supporting tooling and research. Candidates should have consultancy pen testing experience, strong reporting, and familiarity

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments (infrastructure, web apps, cloud).
• Produce clear, high-quality technical reports and present findings to clients.
• Support vulnerability validation and retesting activities.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Infra & web testing

Windows/Linux/AD

Cloud security testing

Tools & methodologies

Written & verbal comms

Continuous learning

Job description

Citation Cyber, a leading UK cyber security consultancy, is hiring a Security Consultant (Penetration Testing) to join its hybrid UK team. You will deliver security assessments across client environments, including infrastructure and web applications, and help strengthen client security postures.

The role emphasizes producing high-quality reports, presenting findings, and supporting tooling and research. Candidates should have consultancy pen testing experience, strong reporting, and familiarity