> Markdown version of [/jobs/ext/2075473-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2075473-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Citation Ltd
- **Location:** Wilmslow, UK
- **Salary:** £79,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Linux, Python (Programming Language), Windows PowerShell, Web Applications, SC Clearance
- **Published:** August 16, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5844156554

## About the Role

* Commercial penetration testing experience within a consultancy or equivalent environment
 * Strong technical reporting skills
 * Experience conducting infrastructure and web application penetration tests
 * Good understanding of Windows, Linux and Active Directory environments
 * Familiarity with Azure and/or AWS security testing
 * Experience using industry-standard penetration testing tools and methodologies
 * Excellent written and verbal communication skills
 * A passion for continuous learning and technical development
 * Current CHECK Team Member (CTM) status
 * Current SC Security Clearance, or eligibility to obtain it
 * CREST CRT, Cyber Scheme CSTM or equivalent certification
 * OSCP or equivalent practical penetration testing certification

## Description

* Deliver a wide range of technical security assessments across client environments
 * Perform infrastructure and web application penetration testing
 * Carry out cloud security assessments
 * Produce clear, high-quality technical reports
 * Present findings and remediation advice to clients
 * Support vulnerability validation and re-testing
 * Contribute to internal tooling, research and knowledge sharing

Technologies:

 * AWS
 * Active Directory
 * Azure
 * Cloud
 * Support
 * Linux
 * Security
 * Web
 * Windows
 * API
 * Bash
 * Mobile
 * PowerShell
 * Python


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)