Penetration Tester

About This Role

This role is for a Security Consultant specializing in penetration testing, working as part of a team to deliver technical security assessments for clients. The position involves identifying vulnerabilities and strengthening cyber resilience across various environments, and is suitable for experienced penetration testers looking to advance their careers.

Responsibilities

• Deliver a wide range of technical security assessments across client environments
• Conduct infrastructure or web application penetration testing
• Perform cloud security assessments
• Produce clear, high-quality technical reports
• Present findings and remediation advice to clients
• Support vulnerability validation and re-testing
• Contribute to internal tooling, research, and knowledge sharing

Requirements

• Commercial penetration testing experience within a consultancy or equivalent environment
• Strong technical reporting skills
• Experience conducting infrastructure and web application penetration tests
• Good understanding of Windows, Linux, and Active Directory environments
• Familiarity with Azure and/or AWS security testing
• Experience using industry-standard penetration testing tools and methodologies
• Excellent written and verbal communication skills
• A passion for continuous learning and technical development

Nice to have:

• Current CHECK Team Member (CTM) status
• Current SC Security Clearance (or eligibility to obtain it)
• CREST CRT / Cyber Scheme CSTM or equivalent certification
• OSCP or equivalent practical penetration testing certification
• Experience with API, mobile, or wireless security testing
• Scripting or automation experience using Python, PowerShell, or Bash

Benefits

• Working for an NCSC CHECK provider and CREST member
• A varied mix of commercial, defence, and public sector projects
• Funded training and industry certifications
• Clear progression towards CHECK Team Member, CHECK Team Leader, and senior technical roles
• Hybrid and flexible working
• A collaborative technical culture where knowledge sharing is encouraged
• Opportunities to contribute to research, tooling, and new service development
• Benefits package

Important Details

• Work format: Hybrid

About the Company

Citation Cyber is one of the UK's leading cyber security consultancies, delivering penetration testing, Cyber Essentials certification, consultancy, training, and managed cyber security services to organizations across both the public and private sectors. They are an NCSC CHECK provider and CREST member company.