Consultant, Security Testing and Red Teaming

Ensign InfoSecurity; Singapore; Hybrid; SGD 100,000 - 160,000; Full time

Job summary

Ensign InfoSecurity is hiring a Consultant for Security Testing and Red Teaming in Singapore. The role involves delivering comprehensive penetration testing across web apps, networks, AD, cloud, mobile, IoT, and OT with minimal supervision.

The ideal candidate will have 3–5 years of hands-on testing experience, OSCP/CRT or similar certs, and strong skills in tools like Burp Suite and Nmap. You will communicate findings clearly and support remediation efforts.

Qualifications

• 3–5 years of hands-on penetration testing experience in consulting, internal security, or equivalent environments.
• Strong understanding of testing methodologies, rules of engagement, and ethical hacking principles.
• Experience testing web apps, networks, AD, mobile apps, cloud and OT environments.

Responsibilities

• Deliver end-to-end penetration testing engagements with minimal supervision across web apps, networks, AD, cloud, mobile, IoT, and OT.
• Identify attack paths, chain vulnerabilities, and assess real-world business impact.
• Produce high-quality findings with accurate severity and remediation guidance.

Skills

OSCP

Penetration testing

Red team

Scripting (Python)

Burp Suite

Tools

Burp Suite

Nmap

Metasploit

BloodHound

PowerShell

Job description

## Consultant, Security Testing and Red TeamingApply: Singapore: Full time: Posted 6 Days Ago: JOBREQ-0003613Ensign is hiring !**Roles and Responsibilities*** Deliver end-to-end penetration testing engagements with minimal supervision, including: + Web application penetration testing + Internal and external network penetration testing + Active Directory security assessments + Cloud and hybrid environment testing + Mobile application penetration testing + IOT penetration testing + OT penetration testing* Perform manual vulnerability discovery, validation, and exploitation beyond automated scanning.* Identify attack paths, chain vulnerabilities, and assess real-world business impact.* Exercise sound judgement in exploitation depth, data handling, and risk management during testing.* Maintain clear, detailed testing notes, evidence, and attack logs to support reporting and quality review.* Produce high-quality technical findings with accurate severity assessment and actionable remediation guidance.* Develop structured penetration testing reports, and support client walkthroughs and debriefs.* Engage professionally with clients during kick-off sessions, testing clarification, and results discussions.* Participate in peer reviews of testing approaches and reports to uphold delivery quality standards.* Continuously develop technical depth across offensive security techniques, platforms, and tooling.* Contribute to security testing playbooks, internal knowledge sharing and peer learning.* Where appropriate, contribute to broader offensive security initiatives, such as: + Adversary simulation and red teaming exercises + Custom tooling, scripting, or automation + Internal research, labs, or capability development**Requirements*** Offensive Security Certified Professional (OSCP) is required.* CREST Certified Registered Penetration Tester (CRT) is preferred.* Advanced or specialist certifications such as: + OSWE, OSEP, OSED + MCRTA, CRTO + eMAPT* Approximately **3 to 5 years of hands-on penetration testing experience** in consulting, internal security, or equivalent practical environments.* Strong understanding of penetration testing methodologies, rules of engagement, and ethical hacking principles.* Solid technical foundations in: + TCP/IP networking and common protocols + Windows and Linux operating systems + Web application architecture and common vulnerability classes* Demonstrated experience testing: + Web applications, including authentication, authorization, and business logic flaws + Network and infrastructure environments + Active Directory domains + Mobile applications* Proficiency with common penetration testing tools (e.g. Burp Suite, Nmap, Metasploit, BloodHound).* Experience with scripting or programming (e.g. Python, PowerShell, Bash) to support testing and automation.* Exposure to cloud security testing (AWS, Azure, GCP) and modern identity platforms.* Experience with post-exploitation, lateral movement, and attack path analysis.* Demonstrated interest in expanding beyond traditional penetration testing into broader offensive security and red teaming.* Ability to clearly communicate technical findings in written reports and verbal discussions.Strong professionalism, integrity, and attention to detail.