Pen Testing Associate — Red Teaming & Cloud Security

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking a penetration tester to execute engagements across web, network, cloud, mobile, IoT and OT environments.

You will work under senior consultants, following defined scopes and methodologies to identify and exploit vulnerabilities. The role requires OSCP certification, solid knowledge of security fundamentals, and hands-on experience with Burp Suite, Nmap, Metasploit, and BloodHound.

Qualifications

• OSCP certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking.
• Foundations in TCP/IP, Windows and Linux.
• Experience with web app security and vulnerability discovery.
• Scripting or programming exposure (Python, Bash, PowerShell).
• Familiarity with OWASP Top 10 and common misconfigurations.

Responsibilities

• Conduct penetration testing engagements under guidance of senior consultants.
• Execute testing activities within defined scopes and methodologies.
• Identify, validate, and exploit security vulnerabilities.
• Document findings with technical details and remediation recommendations.
• Prepare technical reports and executive summaries.
• Collaborate with team during testing, including peer reviews.
• Maintain testing notes and artifacts for QA and reporting.
• Stay current with vulnerabilities and offensive security tooling.
• Support broader offensive security activities over time.

Skills

OSCP certification

Penetration testing

TCP/IP

Windows & Linux

Web security

Scripting (Python/Bash/PowerShell)

OWASP Top 10

Security tools (Burp/Nmap/Metasploit/B

Documentation

Red team interest

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Ensign InfoSecurity (Singapore) Pte. Ltd. is seeking a penetration tester to execute engagements across web, network, cloud, mobile, IoT and OT environments.

You will work under senior consultants, following defined scopes and methodologies to identify and exploit vulnerabilities. The role requires OSCP certification, solid knowledge of security fundamentals, and hands-on experience with Burp Suite, Nmap, Metasploit, and BloodHound.