Red Team & Penetration Testing Consultant

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD.; Singapore; On-site; SGD 90,000 - 140,000; Full time

Job summary

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. is seeking a Consultant for Security Testing and Red Teaming to independently execute penetration testing engagements across web applications, networks, AD, cloud, and mobile environments.

The role emphasizes hands-on testing with autonomy, producing high-quality findings and reports, and growing into adversary simulation, tooling, and security research over time.

Qualifications

• OSCP is required.
• CRT is preferred.
• Advanced certifications such as OSWE, OSEP, OSED, MCRTA, CRTO, eMAPT.
• Approximately 3 to 5 years of hands-on pentesting experience in consulting, internal security, or equivalent practical environments.
• Strong understanding of penetration testing methodologies, rules of engagement, and ethical hacking principles.
• Solid foundations in TCP/IP networking, Windows and Linux OS, and web appl. security.
• Experience testing web apps, networks, AD, mobile, cloud, and OT where applicable.
• Proficiency with Burp Suite, Nmap, Metasploit, BloodHound; scripting in Python/PowerShell/Bash; cloud testing exposure.

Responsibilities

• Deliver end-to-end penetration testing engagements with minimal supervision.
• Web application penetration testing; internal/external network testing; AD assessments.
• Cloud and hybrid environment testing; mobile and IoT testing; OT testing.
• Perform manual vulnerability discovery, validation, and exploitation beyond automated scanning.
• Identify attack paths, chain vulnerabilities, and assess business impact.
• Maintain testing notes, evidence, and attack logs; produce remediation guidance.
• Develop structured penetration testing reports and client walkthroughs.
• Engage professionally with clients during kickoff, clarification, and results discussions.
• Contribute to playbooks, tooling, and red team initiatives.

Skills

Analytical thinking

Attention to detail

Strong communication

Education

OSCP

CRT

OSWE

OSEP

OSED

MCRTA

CRTO

eMAPT

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

ENSIGN INFOSECURITY (CYBERSECURITY) PTE. LTD. is seeking a Consultant for Security Testing and Red Teaming to independently execute penetration testing engagements across web applications, networks, AD, cloud, and mobile environments.

The role emphasizes hands-on testing with autonomy, producing high-quality findings and reports, and growing into adversary simulation, tooling, and security research over time.