Associate Consultant, Cyber Adversarial Emulation

Ensign InfoSecurity; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A leading cybersecurity company in Singapore is seeking a motivated individual to conduct vulnerability assessments and penetration testing across various technologies. Ideal candidates should be familiar with cybersecurity principles and possess relevant certifications. Responsibilities also include participation in Capture-The-Flag events and leading a team to develop local capabilities. If you're keen to grow in a dynamic cyber environment, we encourage you to apply.

Qualifications

• Familiarity with cybersecurity principles and best practices.
• Experience with coding languages like .NET, Python, Bash.
• Possess relevant cybersecurity certifications.

Responsibilities

• Perform vulnerability assessments and penetration testing.
• Participate in Capture-The-Flag events.
• Develop and lead a team in delivering professional services.

Skills

Vulnerability assessments

Penetration testing

Cybersecurity principles

Programming/scripting languages

Security testing tools

Education

Cybersecurity certifications

Tools

Nessus

Burp Suite

Cobalt Strike

Job description

Ensign is hiring !

Duties and Responsibilities

• Perform vulnerability assessments, penetration testing and red teaming on a wide range of technologies including but not limited to Network, Web, Mobile, Thick Client Applications, Cloud, Kubernetes, and Operations Technology.
• Participate in Capture-The-Flag (CTF) events both internally and externally.

Requirements

• Familiarity with cyber security principles (e.g. networking, web development, vulnerability classes) and industry best practices (e.g. OWASP Top 10, MITRE ATT&CK Framework)
• Interest in consulting, including internal and client facing experiences
• Familiar with programming/scripting languages such as .NET, Python, Bash and PowerShell, etc.
• Possess relevant cybersecurity certifications or accredited experience from CTF and Bug Bounties
• Willingness to learn and teachable
• Ability to travel overseas when required

Preferred Qualifications/Skills

• Proficient with security testing tools such as Nessus, Burp Suite, Frida, dex2jar, etc.
• Offensive Cyber Security Certifications (e.g. OSCP, CRT preferred)
• Mobile Application Development / Security Testing
• Red Teaming Tools such as Cobalt Strike, GoPhish, Sliver, Brute Ratel, etc.
• Source Code Review using automated scanners such as Checkmarx
• Reverse Engineering / Malware Development
• Static and Dynamic Analysis
• Experience in various security testing environments such as with the use of jumphosts, VPN, testing over GCC AWS/Azure, onsite/remote environments, etc.
• A self-motivated learner who is keen to develop and lead a team to be able to deliver professional services and grow local capabilities