Associate Security Testing & Red Teaming Engineer

Ensign InfoSecurity; Singapore; Hybrid; SGD 70,000 - 110,000; Full time

Job summary

Ensign InfoSecurity in Singapore is seeking an Associate Consultant for Security Testing and Red Teaming. You will conduct web, network, cloud, mobile, IoT, and OT penetration testing under guidance, document findings, and contribute to high-quality reports.

You will develop hands-on skills, stay current with emerging vulnerabilities and offensive security tooling, and participate in engagements from scoping to post-engagement briefings with opportunities to grow into advanced red team work.

Qualifications

• OSCP certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking principles.
• Exposure to TCP/IP networking, Windows and Linux operating systems, and web app vulnerabilities.
• Familiarity with vulnerability classes (e.g. OWASP Top 10) and reporting requirements.
• Experience with common pentest tools such as Burp Suite, Nmap, Metasploit, BloodHound.

Responsibilities

• Conduct penetration testing engagements across web, network, cloud, mobile, IoT, and OT.
• Execute testing activities per scope and methodology, document findings with evidence and remediation details.
• Assist in preparing technical reports and executive summaries.
• Collaborate with team during testing, including peer reviews and walkthroughs.
• Maintain detailed testing notes and artifacts for QA and reporting.

Skills

OSCP

Penetration testing

Networking (TCP/IP)

Windows/Linux

Cloud security concepts

Scripting (Python/Bash/PowerShell)

Documentation & reporting

Offensive security mindset

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Ensign InfoSecurity in Singapore is seeking an Associate Consultant for Security Testing and Red Teaming. You will conduct web, network, cloud, mobile, IoT, and OT penetration testing under guidance, document findings, and contribute to high-quality reports.

You will develop hands-on skills, stay current with emerging vulnerabilities and offensive security tooling, and participate in engagements from scoping to post-engagement briefings with opportunities to grow into advanced red team work.