Consultant, Red Teaming

Ensign Infosecurity; Singapore; On-site; SGD 90,000 - 180,000; Full time

Job summary

Ensign Infosecurity is seeking a seasoned offensive security professional to lead Red Team engagements and adversarial simulations across diverse environments. You will translate threats into concrete attack scenarios, perform multi-stage simulations, and assess controls across networks, cloud, and identity systems.

You will collaborate with defensive teams to validate detections, enhance playbooks, and produce actionable remediation guidance for senior stakeholders.

Qualifications

• OSCP certification is required for engagement leadership and delivery.
• ,

Responsibilities

• Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based assessments.
• Translate threats into realistic attack scenarios and provide risk-based remediation guidance.
• Perform recon, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations when authorised.
• Assess security controls across networks, endpoints, applications, cloud, identity, and processes.
• Identify and demonstrate attack paths that could expose critical assets and business risks.
• Develop or adapt tools and scripts to achieve engagement objectives and automate repeatable tasks.
• Maintain operational security and minimise disruption during engagements.
• Collaborate with Blue Teams, SOCs, incident response, and other stakeholders during Purple Team engagements.
• Map attacker behaviours to MITRE ATT&CK and validate detections and response playbooks.
• Document improvements and remaining security gaps for remediation.
• Support remediation planning, validation, and retesting.
• Contribute to reusable engagement content and threat simulation scenarios.
• Engage with customers on premises when required and adapt to diverse industries.

Skills

OSCP

MITRE ATT&CK

Red Teaming

Adversarial simulations

Penetration testing

Python

PowerShell

C#

Team collaboration

Education

Bachelor's or higher in cybersecurity / CS

Tools

Python

PowerShell

Bash

C#

PenTesting tools

Job description

Ensign is hiring !

Red Team Engagements

• Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based security assessments.
• Translate relevant threats and customer risks into realistic attack scenarios.
• Perform reconnaissance, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations where authorised.
• Assess security controls across networks, endpoints, applications, cloud platforms, identity systems, and operational processes.
• Identify and demonstrate attack paths that could expose critical systems or business assets.
• Develop or adapt tools, scripts, payloads, and supporting infrastructure to achieve engagement objectives.
• Maintain operational security and minimise the risk of unintended disruption throughout each engagement.

Purple Team Engagements

• Collaborate with Blue Teams, Security Operations Centres, incident response teams, and other defensive stakeholders.
• Design and execute controlled attack scenarios to validate preventive, detective, and responsive security controls.
• Map simulated adversary behaviours to recognised frameworks such as MITRE ATT&CK.
• Evaluate security alerts, telemetry, logging coverage, investigation workflows, and response procedures.
• Help defensive teams develop and refine detection rules, use cases, playbooks, and response processes.
• Facilitate knowledge-sharing sessions to explain attacker techniques and strengthen defensive capabilities.
• Conduct validation and retesting to confirm that identified security gaps have been addressed.
• Document improvements and remaining areas of security exposure.

Engagement Planning and Governance

• Define engagement objectives, scope, assumptions, success criteria, and rules of engagement with relevant stakeholders.
• Ensure all activities are conducted within approved legal, ethical, safety, and customer-defined boundaries.
• Follow applicable change-control, data-handling, access-control, and escalation procedures.
• Maintain accurate records of actions, evidence, findings, and attack paths.
• Communicate critical findings, operational concerns, and potential business risks promptly.
• Coordinate with project managers, internal teams, and customer stakeholders throughout the engagement lifecycle.

Reporting and Stakeholder Communication

• Produce clear technical reports, executive summaries, attack narratives, and prioritised remediation recommendations.
• Explain technical findings in terms of their operational and business impact.
• Present engagement outcomes to technical teams, senior management, and executive stakeholders.
• Deliver engagement debriefs and remediation workshops where required.
• Support remediation planning, validation, and retesting.

Capability Development

• Contribute to the improvement of Red Team and Purple Team methodologies, tools, procedures, and knowledge bases.
• Research emerging threats, vulnerabilities, attack techniques, defensive approaches, and security technologies.
• Share technical knowledge, lessons learned, and good practices with team members.
• Support the development of reusable attack scenarios and detection-validation content.

Customer Engagement and Adaptability

• Deliver assignments of varying scope, complexity, and duration based on customer and business needs.
• Work at customer premises when required.
• Adapt to different industries, technologies, operating environments, and levels of security maturity.
• Remain flexible in supporting planned and ad-hoc project requirements.
• Communicate effectively with internal teams and customer stakeholders throughout each assignment.
• Offensive Security Certified Professional (OSCP) is required.
• Advanced or specialist certifications, such as OSEP, OSED, OSWE, CRTO, CRTE, CREST CRT/CCT, GPEN, GXPN, would be advantageous.
• Demonstrated experience in Red Teaming, Purple Teaming, adversarial simulation, penetration testing, or a related offensive security role.
• Strong knowledge of adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework.
• Hands-on experience with network, Active Directory, Windows, Linux, web application, cloud, and identity-based attack techniques.
• Experience collaborating with defensive security teams to validate and improve security controls.
• Understanding of defensive technologies and processes, including SIEM, endpoint detection and response, network monitoring, security logging, threat hunting, and incident response.
• Proficiency with relevant commercial or open-source offensive security tools and frameworks.
• Ability to develop or modify tools and scripts using languages such as Python, PowerShell, Bash, C#, or another relevant programming language.
• Ability to analyse complex attack paths and translate technical findings into clear business risks and actionable recommendations.
• Strong report-writing, presentation, communication, and stakeholder-management skills.
• Sound professional judgement and a strong commitment to ethics, confidentiality, operational security, and authorised testing boundaries.
• Ability to work independently and collaboratively within multidisciplinary teams.
• Willingness and ability to undertake customer-facing assignments of varying duration, including working at customer premises when required.
• Flexibility to support ad-hoc assignments and changing project requirements.
• Eligibility to obtain any security clearance or customer-specific access approval required for assigned engagements.
• A degree or diploma in cybersecurity, computer science, information technology, or a related discipline is preferred; equivalent practical experience will also be considered.