Security Consultant (Penetration Testing) – Hybrid UK

Citation Cyber; Cardiff; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Funded training and certifications

Career progression toward CHECK roles

Job summary

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing, Cyber Essentials certification, training and managed services. We are seeking a Security Consultant to join our CHECK/CREST-aligned team.

You will perform infrastructure and web application pentests, produce high-quality reports, and present findings to clients. Hybrid UK work, funded training and clear progression toward CHECK Team Member and senior technical roles are offered.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Infrastructure or Web application penetration testing.
• Cloud security assessments.
• Producing clear, high-quality technical reports.
• Presenting findings and remediation advice to clients.
• Supporting vulnerability validation and re-testing.
• Contributing to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Windows

Linux

Active Directory

Azure/AWS security testing

Security tools

Communication

Continuous learning

Job description

Citation Cyber is a leading UK cyber security consultancy delivering penetration testing, Cyber Essentials certification, training and managed services. We are seeking a Security Consultant to join our CHECK/CREST-aligned team.

You will perform infrastructure and web application pentests, produce high-quality reports, and present findings to clients. Hybrid UK work, funded training and clear progression toward CHECK Team Member and senior technical roles are offered.