Security Consultant: Penetration Testing (Hybrid UK)

Citation Cyber; Newcastle upon Tyne; Hybrid; GBP 45,000 - 75,000; Full time

Benefits offered by this job

Hybrid and flexible working

Funded training and industry certs

NCSC CHECK provider and CREST member

Job summary

Citation Cyber is seeking a Security Consultant to join our penetration testing team. You’ll deliver a range of security assessments across client environments, helping organisations identify vulnerabilities and improve cyber resilience.

The role covers infrastructure and web app testing, cloud security reviews and clear, actionable reporting to clients. Hybrid (UK) work with ongoing professional development and training opportunities.

Qualifications

• Commercial penetration testing experience in a consultancy or similar environment.
• Strong technical reporting skills and ability to present findings clearly.
• Experience performing infrastructure and web application penetration tests.
• Good knowledge of Windows, Linux and Active Directory.
• Familiarity with cloud security testing in Azure and/or AWS.
• Proficient with industry-standard testing tools and methodologies.
• Excellent written and verbal communication, plus continuous learning mindset.

Responsibilities

• Deliver a range of security assessments across client environments.
• Perform infrastructure and web application penetration tests.
• Conduct cloud security reviews and provide remediation guidance.
• Produce clear, high-quality technical reports for clients.
• Present findings and actionable recommendations to clients.
• Support vulnerability validation, retesting and tooling research.

Skills

Penetration testing

Report writing

Infrastructure testing

Web app testing

Windows

Linux

Active Directory

Azure security

AWS security

Security tools

Tools

Nessus

Burp Suite

Metasploit

OWASP Testing

Job description

Citation Cyber is seeking a Security Consultant to join our penetration testing team. You’ll deliver a range of security assessments across client environments, helping organisations identify vulnerabilities and improve cyber resilience.

The role covers infrastructure and web app testing, cloud security reviews and clear, actionable reporting to clients. Hybrid (UK) work with ongoing professional development and training opportunities.