Consultant, Red Teaming

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 130,000 - 210,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. seeks experienced security professionals to lead Red Team engagements and adversarial simulations.

You will translate threats into realistic attack scenarios, develop tools and payloads, and help validate and improve client security controls. Responsibilities include planning engagements, documenting findings, and delivering remediation guidance to executive stakeholders. OSCP is required, with advanced certifications a plus.

Qualifications

• OSCP is a required certification for the role.
• Advanced or specialist certifications are advantageous.
• Proven experience in Red Teaming, Purple Teaming, or adversarial simulation.
• Strong report-writing and stakeholder-management skills.
• Ability to work on customer premises when required.

Responsibilities

• Plan and conduct authorised Red Team engagements and simulations.
• Translate threats into realistic attack scenarios for clients.
• Develop tools, scripts, payloads to achieve objectives.
• Collaborate with defensive teams to validate and improve controls.
• Produce clear technical reports and remediation recommendations.

Skills

Red Teaming

Purple Teaming

Penetration Testing

MITRE ATT&CK

Adversary Simulation

Report Writing

Stakeholder Management

Python/PowerShell

Education

Bachelor's degree in cybersecurity/IT

Tools

Python

PowerShell

Bash

C#

Job description

Ensign is hiring !

Red Team Engagements

• Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based security assessments.
• Translate relevant threats and customer risks into realistic attack scenarios.
• Perform reconnaissance, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations where authorised.
• Assess security controls across networks, endpoints, applications, cloud platforms, identity systems, and operational processes.
• Identify and demonstrate attack paths that could expose critical systems or business assets.
• Develop or adapt tools, scripts, payloads, and supporting infrastructure to achieve engagement objectives.
• Maintain operational security and minimise the risk of unintended disruption throughout each engagement.

Purple Team Engagements

• Collaborate with Blue Teams, Security Operations Centres, incident response teams, and other defensive stakeholders.
• Design and execute controlled attack scenarios to validate preventive, detective, and responsive security controls.
• Map simulated adversary behaviours to recognised frameworks such as MITRE ATT&CK.
• Evaluate security alerts, telemetry, logging coverage, investigation workflows, and response procedures.
• Help defensive teams develop and refine detection rules, use cases, playbooks, and response processes.
• Facilitate knowledge-sharing sessions to explain attacker techniques and strengthen defensive capabilities.
• Conduct validation and retesting to confirm that identified security gaps have been addressed.
• Document improvements and remaining areas of security exposure.

Engagement Planning and Governance

• Define engagement objectives, scope, assumptions, success criteria, and rules of engagement with relevant stakeholders.
• Ensure all activities are conducted within approved legal, ethical, safety, and customer-defined boundaries.
• Follow applicable change-control, data-handling, access-control, and escalation procedures.
• Maintain accurate records of actions, evidence, findings, and attack paths.
• Communicate critical findings, operational concerns, and potential business risks promptly.
• Coordinate with project managers, internal teams, and customer stakeholders throughout the engagement lifecycle.

Reporting and Stakeholder Communication

• Produce clear technical reports, executive summaries, attack narratives, and prioritised remediation recommendations.
• Explain technical findings in terms of their operational and business impact.
• Present engagement outcomes to technical teams, senior management, and executive stakeholders.
• Deliver engagement debriefs and remediation workshops where required.
• Support remediation planning, validation, and retesting.

Capability Development

• Contribute to the improvement of Red Team and Purple Team methodologies, tools, procedures, and knowledge bases.
• Research emerging threats, vulnerabilities, attack techniques, defensive approaches, and security technologies.
• Share technical knowledge, lessons learned, and good practices with team members.
• Support the development of reusable attack scenarios and detection-validation content.

Customer Engagement and Adaptability

• Deliver assignments of varying scope, complexity, and duration based on customer and business needs.
• Work at customer premises when required.
• Adapt to different industries, technologies, operating environments, and levels of security maturity.
• Remain flexible in supporting planned and ad-hoc project requirements.
• Communicate effectively with internal teams and customer stakeholders throughout each assignment.
• Offensive Security Certified Professional (OSCP) is required.
• Advanced or specialist certifications, such as OSEP, OSED, OSWE, CRTO, CRTE, CREST CRT/CCT, GPEN, GXPN, would be advantageous.
• Demonstrated experience in Red Teaming, Purple Teaming, adversarial simulation, penetration testing, or a related offensive security role.
• Strong knowledge of adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework.
• Hands‑on experience with network, Active Directory, Windows, Linux, web application, cloud, and identity‑based attack techniques.
• Experience collaborating with defensive security teams to validate and improve security controls.
• Understanding of defensive technologies and processes, including SIEM, endpoint detection and response, network monitoring, security logging, threat hunting, and incident response.
• Proficiency with relevant commercial or open-source offensive security tools and frameworks.
• Ability to develop or modify tools and scripts using languages such as Python, PowerShell, Bash, C#, or another relevant programming language.
• Ability to analyse complex attack paths and translate technical findings into clear business risks and actionable recommendations.
• Strong report‑writing, presentation, communication, and stakeholder‑management skills.
• Sound professional judgement and a strong commitment to ethics, confidentiality, operational security, and authorised testing boundaries.
• Ability to work independently and collaboratively within multidisciplinary teams.
• Willingness and ability to undertake customer‑facing assignments of varying duration, including working at customer premises when required.
• Flexibility to support ad‑hoc assignments and changing project requirements.
• Eligibility to obtain any security clearance or customer‑specific access approval required for assigned engagements.
• A degree or diploma in cybersecurity, computer science, information technology, or a related discipline is preferred; equivalent practical experience will also be considered.