Security Consultant: Penetration Testing (Hybrid UK)

Citation Cyber; Chesterfield; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid and flexible working

Funded training and industry certifica

Job summary

Citation Cyber, a leading UK cyber security consultancy, is hiring a Security Consultant (Penetration Testing) in a hybrid UK role. You’ll deliver wide-ranging assessments, report findings, and guide remediation for client environments, with opportunities to grow within CHECK and CREST frameworks.

The role emphasizes testing infrastructure and web apps, producing high-quality reports and presenting to clients, while fostering continuous learning and tooling development.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of security assessments across client environments.
• Identify vulnerabilities and help strengthen cyber resilience.
• Perform infrastructure or web application pen tests.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Reporting

Infrastructure testing

Web app testing

Windows/Linux/AD

Azure/AWS security testing

Testing tools & methodologies

Communication

Continuous learning

Job description

Citation Cyber, a leading UK cyber security consultancy, is hiring a Security Consultant (Penetration Testing) in a hybrid UK role. You’ll deliver wide-ranging assessments, report findings, and guide remediation for client environments, with opportunities to grow within CHECK and CREST frameworks.

The role emphasizes testing infrastructure and web apps, producing high-quality reports and presenting to clients, while fostering continuous learning and tooling development.