Security Consultant: Penetration Testing & Cloud Security

Citation Cyber; United Kingdom; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid and flexible working

Funded training and industry certs

Competitive salary and benefits

Job summary

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our growing team. You will deliver a wide range of security assessments across client environments, identify vulnerabilities and help strengthen cyber resilience.

The role includes cloud security assessments, producing high-quality reports, presenting remediation advice, supporting vulnerability validation and re-testing, and contributing to tooling and knowledge sharing.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Reporting skills

Infrastructure testing

Web application testing

Windows

Linux

Active Directory

Azure/AWS testing

CTM status

SC clearance

CREST CRT/CSTM

OSCP

APIs/Mobile/WiFi testing

Scripting (Python/PowerShell/Bash)

Tools

Nessus

Burp Suite

Metasploit

Nmap

Job description

Citation Cyber is seeking a Security Consultant (Penetration Testing) to join our growing team. You will deliver a wide range of security assessments across client environments, identify vulnerabilities and help strengthen cyber resilience.

The role includes cloud security assessments, producing high-quality reports, presenting remediation advice, supporting vulnerability validation and re-testing, and contributing to tooling and knowledge sharing.