Associate Consultant, Security Testing and Red Teaming

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD.; Singapore; On-site; SGD 52,000 - 82,000; Full time

Job summary

Ensign InfoSecurity (Cybersecurity) PTE. LTD. is seeking an Associate Consultant, Security Testing and Red Teaming to grow as an offensive security professional.

You will perform hands-on penetration testing across web apps, networks, cloud environments, and mobile platforms, under senior guidance. This early-career role offers structured mentorship, real client exposure, and a clear progression pathway toward senior penetration testing and red teaming, with opportunities to contribute to

Qualifications

• OSCP certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking principles.
• Foundations in TCP/IP networking.
• Windows and Linux operating systems.
• Web architecture and vulnerabilities.
• Scripting or programming experience (Python, Bash, PowerShell).
• Familiarity with vulnerability classes (OWASP Top 10, misconfigurations, credential abuse).
• Active Directory security concepts.
• Cloud platforms or containerised environments will be useful.
• Hands-on experience with common pentesting tools (Burp Suite, Nmap, Metasploit, BloodHound).

Responsibilities

• Conduct penetration testing engagements under guidance, including web app testing, network and infrastructure testing, and cloud security testing.
• Identify, validate, and exploit vulnerabilities using standard tools and manual techniques.
• Document findings clearly with evidence and remediation recommendations.
• Assist in preparing high-quality technical reports and executive summaries.
• Participate in engagement activities such as scoping calls, kick-off meetings, and post-engagement briefings.
• Collaborate with team members during testing, including peer reviews and walkthroughs.
• Maintain detailed testing notes, logs, and artifacts for QA and reporting.
• Continuously develop skills across testing methods, tooling, and security fundamentals.
• Stay current with emerging vulnerabilities and attack techniques.
• Over time, contribute to adversary simulations, red teaming, automation, and security research.

Skills

Penetration testing

Ethical hacking

TCP/IP networking

Windows/Linux

Cloud security

Red teaming

Scripting (Python)

Documentation

OWASP Top 10

Education

OSCP certification

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Associate Consultant, Security Testing and Red Teaming

Description

The Associate Consultant, Security Testing and Red Teamingis an early-career role for security professionals who are passionate aboutoffensive security and penetration testing. This role is designed forindividuals with strong fundamentals, hands-on technical capability, and the drive to develop into a well-rounded offensive security consultant.

You will primarily support and deliver penetration testing engagements across web applications, internal and external infrastructure, and cloud environments. Over time, you will be exposed to a broader range ofoffensive security activities, including adversary simulation, red teaming, tooling development, and security research.

This role provides structured mentorship, hands-on experience across real client environments, and a clear progression pathway toward senior penetration testing and red teaming roles.

Roles and Responsibilities

• Conduct penetration testing engagements under the guidance of senior consultants, including:
• Web application penetration testing
• Network and infrastructure penetration testing (internal and external)
• Cloud security testing (e.g. AWS, Azure, GCP)
• Mobile application penetration testing
• IOT penetration testing
• OT penetration testing
• Execute assigned testing activities responsibly and professionally, following defined scopes, rules of engagement, and methodologies.
• Identify, validate, and exploit security vulnerabilities using industry-standard tools and manual techniques.
• Document findings clearly and accurately, including technical details, evidence, and remediation recommendations.
• Assist in preparing high-quality technical reports and contribute to executive-level summaries.
• Participate in engagement activities such as kick-off calls, scoping discussions, and post-engagement briefings where appropriate.
• Collaborate with team members during testing, including peer reviews and technical walkthroughs.
• Maintain detailed testing notes, logs, and artifacts to support quality assurance and reporting.
• Continuously develop technical skills across penetration testing, exploitation techniques, and security fundamentals.
• Stay current with emerging vulnerabilities, attack techniques, and offensive security tooling.
• Over time, support or participate in broader offensive security activities, such as:
• Adversary simulation and red teaming exercises
• Automation or tooling development
• Security research and proof-of-concept development

Requirements

• Offensive Security Certified Professional (OSCP) certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking principles.
• Solid foundations in:
• TCP/IP networking
• Operating systems (Windows and Linux)
• Web application architecture and common vulnerabilities
• Exposure to scripting or programming (e.g. Python, Bash, PowerShell).
• Familiarity with common vulnerability classes (e.g. OWASP Top 10, misconfigurations, credential abuse).
• Basic understanding of Active Directory security concepts.
• Exposure to cloud platforms or containerised environments will be useful.
• Hands‑on experience using common penetration testing tools (e.g. Burp Suite, Nmap, Metasploit, BloodHound).
• Ability to write clear, structured, and technically accurate documentation and reports.
• Strong desire to grow into advanced offensive security and red teaming roles.
• Strong analytical mindset and problem‑solving skills.
• Professional conduct, integrity, and respect for confidentiality.