Security Consultant - Penetration Testing & Cloud Security

Citation Cyber; West of England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Professional development

Industry certifications

Job summary

Citation Cyber is seeking a Security Consultant to join our penetration testing team in the UK. The role involves delivering a broad range of assessments, identifying vulnerabilities and advising on remediation to strengthen clients' cyber resilience.

You'll conduct infrastructure and web app tests, produce clear reports, present findings to clients and contribute to tooling and knowledge sharing. Hybrid working with ongoing professional development is offered.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing across client environments.
• Produce clear, high-quality technical reports and present findings.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Communications

Windows/Linux/AD

Azure/AWS testing

Penetration testing tools

Python scripting

PowerShell scripting

Bash scripting

Education

CHECK Team Member (CTM) status

Current SC Security Clearance

CREST CRT / Cyber Scheme CSTM

OSCP or equivalent certification

Job description

Citation Cyber is seeking a Security Consultant to join our penetration testing team in the UK. The role involves delivering a broad range of assessments, identifying vulnerabilities and advising on remediation to strengthen clients' cyber resilience.

You'll conduct infrastructure and web app tests, produce clear reports, present findings to clients and contribute to tooling and knowledge sharing. Hybrid working with ongoing professional development is offered.