Consultant, Security Testing and Red Teaming

Ensign is hiring !

Roles and Responsibilities

• Deliver end-to-end penetration testing engagements with minimal supervision, including:
  • Web application penetration testing
  • Internal and external network penetration testing
  • Active Directory security assessments
  • Cloud and hybrid environment testing
  • Mobile application penetration testing
  • IOT penetration testing
  • OT penetration testing
• Perform manual vulnerability discovery, validation, and exploitation beyond automated scanning.
• Identify attack paths, chain vulnerabilities, and assess real-world business impact.
• Exercise sound judgement in exploitation depth, data handling, and risk management during testing.
• Maintain clear, detailed testing notes, evidence, and attack logs to support reporting and quality review.
• Produce high-quality technical findings with accurate severity assessment and actionable remediation guidance.
• Develop structured penetration testing reports, and support client walkthroughs and debriefs.
• Engage professionally with clients during kick-off sessions, testing clarification, and results discussions.
• Participate in peer reviews of testing approaches and reports to uphold delivery quality standards.
• Continuously develop technical depth across offensive security techniques, platforms, and tooling.
• Contribute to security testing playbooks, internal knowledge sharing and peer learning.
• Where appropriate, contribute to broader offensive security initiatives, such as:
  • Adversary simulation and red teaming exercises
  • Custom tooling, scripting, or automation
  • Internal research, labs, or capability development

Requirements

• Offensive Security Certified Professional (OSCP) is required.
• CREST Certified Registered Penetration Tester (CRT) is preferred.
• Advanced or specialist certifications such as:
  • OSWE, OSEP, OSED
  • MCRTA, CRTO
  • eMAPT
• Approximately 3 to 5 years of hands-on penetration testing experience in consulting, internal security, or equivalent practical environments.
• Strong understanding of penetration testing methodologies, rules of engagement, and ethical hacking principles.
• Solid technical foundations in:
  • TCP/IP networking and common protocols
  • Windows and Linux operating systems
  • Web application architecture and common vulnerability classes
• Demonstrated experience testing:
  • Web applications, including authentication, authorization, and business logic flaws
  • Network and infrastructure environments
  • Active Directory domains
  • Mobile applications
• Proficiency with common penetration testing tools (e.g. Burp Suite, Nmap, Metasploit, BloodHound).
• Experience with scripting or programming (e.g. Python, PowerShell, Bash) to support testing and automation.
• Exposure to cloud security testing (AWS, Azure, GCP) and modern identity platforms.
• Experience with post-exploitation, lateral movement, and attack path analysis.
• Demonstrated interest in expanding beyond traditional penetration testing into broader offensive security and red teaming.
• Ability to clearly communicate technical findings in written reports and verbal discussions.

Strong professionalism, integrity, and attention to detail.