Security Consultant – Penetration Testing (Hybrid UK)

Citation Ltd; Hemel Hempstead; Hybrid; GBP 65,000 - 95,000; Full time

Job summary

Citation Cyber in the United Kingdom is seeking a Security Consultant (Penetration Testing) to work in a hybrid model. You will perform infrastructure and web application pentests, assess cloud security, and deliver clear reports to clients across sectors.

The role requires strong testing experience, excellent communication, and a drive for continuous learning. Hybrid UK flexibility and professional development opportunities are offered.

Qualifications

• Commercial penetration testing experience within a consultancy or equivalent environment.
• Strong technical reporting skills.
• Experience conducting infrastructure and web application penetration tests.
• Good understanding of Windows, Linux and Active Directory environments.
• Familiarity with Azure and/or AWS security testing.
• Experience using industry-standard penetration testing tools and methodologies.
• Excellent written and verbal communication skills.
• A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and strengthen client cyber resilience.
• Produce clear, high-quality technical reports.
• Present findings and remediation advice to clients.
• Support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Cloud security testing

Windows

Linux

Active Directory

Azure

AWS

Communication

Continuous learning

Education

CHECK CTM status (desirable)

SC Security Clearance (or eligible)

CREST CRT / CSTM

OSCP or equivalent

Tools

Penetration testing tools

Vulnerability assessment tools

Reporting tools

Job description

Citation Cyber in the United Kingdom is seeking a Security Consultant (Penetration Testing) to work in a hybrid model. You will perform infrastructure and web application pentests, assess cloud security, and deliver clear reports to clients across sectors.

The role requires strong testing experience, excellent communication, and a drive for continuous learning. Hybrid UK flexibility and professional development opportunities are offered.