Lead Red & Purple Team Security Consultant

Ensign InfoSecurity; Singapore; On-site; SGD 100,000 - 160,000; Full time

Job summary

Ensign InfoSecurity is seeking an experienced security consultant to plan and execute Red Team and Purple Team engagements across diverse environments. You will translate threats into realistic attack scenarios and develop tooling to meet engagement objectives, while maintaining strict operational security and coordinating with customer teams.

The role requires hands-on offensive security experience, strong knowledge of MITRE ATT&CK, and the ability to communicate complex risks to technical and

Qualifications

• OSCP certification is required.
• Experience in Red/ Purple Teaming, adversarial simulation, or offensive security.
• Strong knowledge of MITRE ATT&CK and attack techniques.
• Hands-on experience with network, Active Directory, Windows, Linux, web apps, cloud, and identity-based attacks.
• Experience collaborating with defensive security teams to validate and improve controls.
• Ability to translate findings into clear business risks and actionable remediation recommendations.
• Excellent report-writing, presentation, and stakeholder-management skills.
• Willingness to work at customer premises when required and to obtain security clearance if needed.

Responsibilities

• Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based assessments.
• Translate threats and risks into realistic attack scenarios across networks, endpoints, cloud, and identities.
• Perform recon, initial-access testing, privilege escalation, lateral movement, persistence, and data access simulations when authorised.
• Assess security controls and expose attack paths that could affect critical assets.
• Develop or adapt tools, scripts, payloads, and supporting infra to achieve engagement objectives.
• Maintain operational security and minimise disruption risk throughout engagements.
• Collaborate with Blue Teams and SOCs in Purple Team engagements; map activities to MITRE ATT&CK.
• Produce clear technical reports and executive summaries with prioritized remediation.
• Support remediation planning, validation, and retesting with customers.

Skills

OSCP

Red Teaming

Purple Teaming

MITRE ATT&CK

Python

PowerShell

Bash

C#

Gn proficiency in security reports

Report writing

Stakeholder management

Security clearance eligibility

OSEP

OSED

OSWE

CRTO

CRTE

CREST CRT/CCT

GPEN

GXPN

Education

Degree in cybersecurity/computer science/IT

Tools

Metasploit

Nmap

Burp Suite

Cobalt Strike

Job description

Ensign InfoSecurity is seeking an experienced security consultant to plan and execute Red Team and Purple Team engagements across diverse environments. You will translate threats into realistic attack scenarios and develop tooling to meet engagement objectives, while maintaining strict operational security and coordinating with customer teams.

The role requires hands-on offensive security experience, strong knowledge of MITRE ATT&CK, and the ability to communicate complex risks to technical and