Security Consultant: Penetration Testing (Hybrid UK)

Citation Cyber; Aberdeen City; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid and flexible working

Funded training and certifications

Career progression toward CHECK roles

Collaborative technical culture

Job summary

Citation Cyber seeks a Security Consultant (Penetration Testing) to join our hybrid UK team, delivering a range of security assessments across client environments and producing clear reports with remediation recommendations.

Essential experience includes consultancy pentest work, strong reporting, Windows/Linux/AD knowledge, cloud security testing, and excellent communication. Desirable CTM/SC clearance and CREST/OSCP-like certifications are beneficial.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing.
• Cloud security assessments.
• Producing clear, high-quality technical reports.
• Presenting findings and remediation advice to clients.
• Supporting vulnerability validation and re-testing.
• Contributing to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Reporting skills

Infrastructure testing

Web app testing

Windows

Linux

Active Directory

Cloud security

Pentest tools

Communication

Continual learning

Tools

Pentest tools

Job description

Citation Cyber seeks a Security Consultant (Penetration Testing) to join our hybrid UK team, delivering a range of security assessments across client environments and producing clear reports with remediation recommendations.

Essential experience includes consultancy pentest work, strong reporting, Windows/Linux/AD knowledge, cloud security testing, and excellent communication. Desirable CTM/SC clearance and CREST/OSCP-like certifications are beneficial.