Red Teaming & Security Testing Associate

Ensign InfoSecurity (Singapore) Pte. Ltd.; Singapore; On-site; SGD 70,000 - 110,000; Full time

Job summary

Ensign InfoSecurity (Singapore) Pte. Ltd. is hiring an Associate Consultant in Security Testing and Red Teaming. You will perform penetration testing across web apps, networks, cloud, mobile, IoT, and OT, under guidance of senior consultants.

You will document findings, contribute to technical reports and executive summaries, and participate in scoping calls and reviews as part of a growing offensive security practice. OSCP is required.

Qualifications

• OSCP certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking principles.
• Foundations in TCP/IP networking, Windows and Linux.
• Exposure to scripting (Python, Bash, PowerShell).
• Familiarity with OWASP Top 10 and vulnerability classes.
• Hands-on experience with common pentesting tools: Burp Suite, Nmap, Metasploit, BloodHound.

Responsibilities

• Conduct penetration testing engagements under guidance of senior consultants.
• Identify, validate, and exploit security vulnerabilities.
• Document findings clearly with evidence and remediation recommendations.
• Assist in preparing high-quality technical reports and executive summaries.
• Participate in scoping calls, kickoff discussions, and post-engagement briefings.
• Collaborate with team members during testing, including peer reviews.

Skills

Penetration testing

Ethical hacking

Documentation

Report writing

Collaboration

Education

OSCP certification

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Job description

Ensign InfoSecurity (Singapore) Pte. Ltd. is hiring an Associate Consultant in Security Testing and Red Teaming. You will perform penetration testing across web apps, networks, cloud, mobile, IoT, and OT, under guidance of senior consultants.

You will document findings, contribute to technical reports and executive summaries, and participate in scoping calls and reviews as part of a growing offensive security practice. OSCP is required.