Consultant, Security Testing and Red Teaming

Ensign is hiring !

Roles and Responsibilities

- Deliver end-to-end penetration testing engagements with minimal supervision, including: Web application penetration testing
- Internal and external network penetration testing
- Active Directory security assessments
- Cloud and hybrid environment testing
- Mobile application penetration testing
- IOT penetration testing
- OT penetration testing

- Perform manual vulnerability discovery, validation, and exploitation beyond automated scanning.
- Identify attack paths, chain vulnerabilities, and assess real-world business impact.
- Exercise sound judgement in exploitation depth, data handling, and risk management during testing.
- Maintain clear, detailed testing notes, evidence, and attack logs to support reporting and quality review.
- Produce high-quality technical findings with accurate severity assessment and actionable remediation guidance.
- Develop structured penetration testing reports, and support client walkthroughs and debriefs.
- Engage professionally with clients during kick-off sessions, testing clarification, and results discussions.
- Participate in peer reviews of testing approaches and reports to uphold delivery quality standards.
- Continuously develop technical depth across offensive security techniques, platforms, and tooling.
- Contribute to security testing playbooks, internal knowledge sharing and peer learning.
- Where appropriate, contribute to broader offensive security initiatives, such as: Adversary simulation and red teaming exercises
- Custom tooling, scripting, or automation
- Internal research, labs, or capability development

Requirements

- Offensive Security Certified Professional (OSCP) is required.
- CREST Certified Registered Penetration Tester (CRT) is preferred.
- Advanced or specialist certifications such as: OSWE, OSEP, OSED
- MCRTA, CRTO
- eMAPT

- Approximately 3 to 5 years of hands-on penetration testing experience in consulting, internal security, or equivalent practical environments.
- Strong understanding of penetration testing methodologies, rules of engagement, and ethical hacking principles.
- Solid technical foundations in: TCP/IP networking and common protocols
- Windows and Linux operating systems
- Web application architecture and common vulnerability classes

- Demonstrated experience testing: Web applications, including authentication, authorization, and business logic flaws
- Network and infrastructure environments
- Active Directory domains
- Mobile applications

- Proficiency with common penetration testing tools (e.g. Burp Suite, Nmap, Metasploit, BloodHound).
- Experience with scripting or programming (e.g. Python, PowerShell, Bash) to support testing and automation.
- Exposure to cloud security testing (AWS, Azure, GCP) and modern identity platforms.
- Experience with post-exploitation, lateral movement, and attack path analysis.
- Demonstrated interest in expanding beyond traditional penetration testing into broader offensive security and red teaming.
- Ability to clearly communicate technical findings in written reports and verbal discussions.

Strong professionalism, integrity, and attention to detail.