Security Consultant: Penetration Testing & Hybrid Work

Citation Cyber; Bath; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working

Competitive salary & benefits

Job summary

Citation Cyber is seeking a Security Consultant (Penetration Testing) in the UK on a hybrid basis. You will perform infrastructure and web application testing, cloud security assessments, and deliver clear reports with remediation guidance.

The role requires experience in consultancy, strong reporting, and excellent communication. We value CHECK/CREST involvement, ongoing learning, and contributions to tooling and knowledge sharing within a collaborative team.

Qualifications

• Essential: Commercial penetration testing experience in a consultancy or equivalent environment.
• Essential: Strong technical reporting skills.
• Essential: Experience conducting infrastructure and web app penetration tests.
• Essential: Good understanding of Windows, Linux and Active Directory.
• Essential: Familiarity with Azure and/or AWS security testing.
• Essential: Experience using industry-standard penetration testing tools and methodologies.
• Essential: Excellent written and verbal communication skills.
• Essential: A passion for continuous learning and technical development.

Responsibilities

• Deliver a wide range of technical security assessments across client environments.
• Identify vulnerabilities and help strengthen client cyber resilience.
• Produce clear, high-quality technical reports and present findings to clients.
• Provide remediation advice and support vulnerability validation and re-testing.
• Contribute to internal tooling, research and knowledge sharing.

Skills

Penetration testing

Technical reporting

Infrastructure testing

Web application testing

Windows/Linux/AD

Azure/AWS security testing

Tools & methodologies

Communication

Continuous learning

Job description

Citation Cyber is seeking a Security Consultant (Penetration Testing) in the UK on a hybrid basis. You will perform infrastructure and web application testing, cloud security assessments, and deliver clear reports with remediation guidance.

The role requires experience in consultancy, strong reporting, and excellent communication. We value CHECK/CREST involvement, ongoing learning, and contributions to tooling and knowledge sharing within a collaborative team.