> Markdown version of [/jobs/ext/2915024-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2915024-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Citation Ltd
- **Location:** Reading, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing Security, Linux, Python (Programming Language), Wireless Security, Windows PowerShell, Web Applications, Scripting, SC Clearance
- **Published:** September 15, 2026
- **Apply:** https://www.collegerecruiter.com/job/2879224831-penetration-tester

## About the Role

Whether you're already a CHECK Team Member (CTM) or you're an experienced penetration tester ready to take that next step, we'd love to hear from you., Essential

 * Commercial penetration testing experience within a consultancy or equivalent environment
 * Strong technical reporting skills
 * Experience conducting infrastructure and web application penetration tests
 * Good understanding of Windows, Linux and Active Directory environments
 * Familiarity with Azure and/or AWS security testing
 * Experience using industry-standard penetration testing tools and methodologies
 * Excellent written and verbal communication skills
 * A passion for continuous learning and technical development

Desirable

 * Current CHECK Team Member (CTM) status
 * Current SC Security Clearance (or eligibility to obtain it)
 * CREST CRT / Cyber Scheme CSTM or equivalent certification
 * OSCP or equivalent practical penetration testing certification
 * Experience with API, mobile or wireless security testing
 * Scripting or automation experience using Python, PowerShell or Bash, You're passionate about offensive security and enjoy solving complex technical challenges. You produce high-quality work, communicate clearly with clients and are always looking to improve your skills.

Whether you're already delivering CHECK assessments or you're looking to achieve CHECK status in the near future, you'll be joining a team that will support your professional development and provide exposure to challenging and rewarding engagements.

## Description

You'll work as part of our penetration testing team delivering a wide range of technical security assessments across client environments, helping organisations identify vulnerabilities and strengthen their cyber resilience.

Your work will include:

 * Infrastructure or Web application penetration testing
 * Cloud security assessments
 * Producing clear, high-quality technical reports
 * Presenting findings and remediation advice to clients
 * Supporting vulnerability validation and re-testing
 * Contributing to internal tooling, research and knowledge sharing


## Related Videos

- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)