Associate Security Testing & Red Team Engineer

Ensign InfoSecurity; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity is seeking an Associate Consultant to conduct penetration testing engagements across web apps, networks, cloud, mobile, IoT, and OT in Singapore.

Under guidance of senior consultants, you will document findings, support reports, and participate in scoping calls and peer reviews, while continuously developing offensive security skills.

This role requires OSCP, strong methodology knowledge, and hands-on tool experience with Burp Suite, Nmap, Metasploit, BloodHound.

Qualifications

• OSCP certification is required.
• Strong understanding of penetration testing methodologies.
• Foundations in Windows and Linux operating systems.
• Exposure to common vulnerability classes and security concepts.
• Experience with scripting or programming helps.

Responsibilities

• Conduct penetration testing engagements under guidance of senior consultants.
• Perform web app, network, cloud, mobile, IoT, and OT testing.
• Identify, validate and exploit vulnerabilities using tools and manual techniques.
• Document findings with evidence and remediation recommendations.
• Assist in preparing high-quality technical reports and executive summaries.
• Participate in kickoff calls, scoping discussions and post-engagement briefings.
• Collaborate with team members during testing, including peer reviews and walkthroughs.
• Maintain testing notes, logs and artifacts for QA and reporting.
• Stay current with vulnerabilities, attack techniques, and tooling.
• Contribute to broader offensive security activities such as red teaming and tooling development.

Skills

Penetration testing

Ethical hacking

Scripting (Python/Bash)

Documentation

Team collaboration

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Ensign InfoSecurity is seeking an Associate Consultant to conduct penetration testing engagements across web apps, networks, cloud, mobile, IoT, and OT in Singapore.

Under guidance of senior consultants, you will document findings, support reports, and participate in scoping calls and peer reviews, while continuously developing offensive security skills.

This role requires OSCP, strong methodology knowledge, and hands-on tool experience with Burp Suite, Nmap, Metasploit, BloodHound.