Consultant, Red Teaming

Ensign InfoSecurity; Singapore; Hybrid; SGD 90,000 - 130,000; Full time

Job summary

Ensign InfoSecurity is seeking a Consultant for Red Team engagements in Singapore. You will plan and execute authorised red and purple team exercises, translate threat scenarios into actionable tests, and collaborate with defensive teams to validate security controls.

The role emphasizes governance, clear reporting, and remediation coaching, with active customer engagement. The ideal candidate has OSCP and hands-on experience across network, endpoint, cloud, and identity attacks, plus

Qualifications

• OSCP is required.
• Advanced or specialist certifications (e.g., OSEP/OSED/OSWE/CRTO/CRTE/CREST CRT/CCT, GPEN, GXPN) would be advantageous.
• Experience in Red Teaming, Purple Teaming, adversarial simulation, or related offensive security role.
• Strong knowledge of attacker tactics, techniques, and procedures, including MITRE ATT&CK.

Responsibilities

• Plan and conduct authorised Red Team engagements and simulations.
• Collaborate with Blue Teams and incident response teams to validate controls.
• Define engagement objectives, scope, and rules of engagement with stakeholders.
• Produce clear technical reports and remediation recommendations.
• Support remediation planning, validation, and retesting.
• Develop reusable attack scenarios and validation content.

Skills

Red Teaming

Purple Teaming

Adversarial simulations

Penetration testing

MITRE ATT&CK

Threat modelling

Tool development

Technical reporting

Client engagement

Education

Degree in cybersecurity or related field

Tools

Python

PowerShell

Bash

C#

Windows

Job description

## Consultant, Red TeamingApply: Singapore: Full time: Posted Today: JOBREQ-0003615Ensign is hiring !**Red Team Engagements**- Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based security assessments.- Translate relevant threats and customer risks into realistic attack scenarios.- Perform reconnaissance, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations where authorised.- Assess security controls across networks, endpoints, applications, cloud platforms, identity systems, and operational processes.- Identify and demonstrate attack paths that could expose critical systems or business assets.- Develop or adapt tools, scripts, payloads, and supporting infrastructure to achieve engagement objectives.- Maintain operational security and minimise the risk of unintended disruption throughout each engagement.**Purple Team Engagements**- Collaborate with Blue Teams, Security Operations Centres, incident response teams, and other defensive stakeholders.- Design and execute controlled attack scenarios to validate preventive, detective, and responsive security controls.- Map simulated adversary behaviours to recognised frameworks such as MITRE ATT&CK.- Evaluate security alerts, telemetry, logging coverage, investigation workflows, and response procedures.- Help defensive teams develop and refine detection rules, use cases, playbooks, and response processes.- Facilitate knowledge-sharing sessions to explain attacker techniques and strengthen defensive capabilities.- Conduct validation and retesting to confirm that identified security gaps have been addressed.- Document improvements and remaining areas of security exposure.**Engagement Planning and Governance**- Define engagement objectives, scope, assumptions, success criteria, and rules of engagement with relevant stakeholders.- Ensure all activities are conducted within approved legal, ethical, safety, and customer-defined boundaries.- Follow applicable change-control, data-handling, access-control, and escalation procedures.- Maintain accurate records of actions, evidence, findings, and attack paths.- Communicate critical findings, operational concerns, and potential business risks promptly.- Coordinate with project managers, internal teams, and customer stakeholders throughout the engagement lifecycle.**Reporting and Stakeholder Communication**- Produce clear technical reports, executive summaries, attack narratives, and prioritised remediation recommendations.- Explain technical findings in terms of their operational and business impact.- Present engagement outcomes to technical teams, senior management, and executive stakeholders.- Deliver engagement debriefs and remediation workshops where required.- Support remediation planning, validation, and retesting.**Capability Development**- Contribute to the improvement of Red Team and Purple Team methodologies, tools, procedures, and knowledge bases.- Research emerging threats, vulnerabilities, attack techniques, defensive approaches, and security technologies.- Share technical knowledge, lessons learned, and good practices with team members.- Support the development of reusable attack scenarios and detection-validation content.**Customer Engagement and Adaptability**- Deliver assignments of varying scope, complexity, and duration based on customer and business needs.- Work at customer premises when required.- Adapt to different industries, technologies, operating environments, and levels of security maturity.- Remain flexible in supporting planned and ad-hoc project requirements.- Communicate effectively with internal teams and customer stakeholders throughout each assignment.- Offensive Security Certified Professional (OSCP) is required.- Advanced or specialist certifications, such as OSEP, OSED, OSWE, CRTO, CRTE, CREST CRT/CCT, GPEN, GXPN, would be advantageous.- Demonstrated experience in Red Teaming, Purple Teaming, adversarial simulation, penetration testing, or a related offensive security role.- Strong knowledge of adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework.- Hands-on experience with network, Active Directory, Windows, Linux, web application, cloud, and identity-based attack techniques.- Experience collaborating with defensive security teams to validate and improve security controls.- Understanding of defensive technologies and processes, including SIEM, endpoint detection and response, network monitoring, security logging, threat hunting, and incident response.- Proficiency with relevant commercial or open-source offensive security tools and frameworks.- Ability to develop or modify tools and scripts using languages such as Python, PowerShell, Bash, C#, or another relevant programming language.- Ability to analyse complex attack paths and translate technical findings into clear business risks and actionable recommendations.- Strong report-writing, presentation, communication, and stakeholder-management skills.- Sound professional judgement and a strong commitment to ethics, confidentiality, operational security, and authorised testing boundaries.- Ability to work independently and collaboratively within multidisciplinary teams.- Willingness and ability to undertake customer-facing assignments of varying duration, including working at customer premises when required.- Flexibility to support ad-hoc assignments and changing project requirements.- Eligibility to obtain any security clearance or customer-specific access approval required for assigned engagements.- A degree or diploma in cybersecurity, computer science, information technology, or a related discipline is preferred; equivalent practical experience will also be considered.