Ensign is hiring !

Roles and Responsibilities

• Conduct penetration testing engagements under the guidance of senior consultants, including:
  • Web application penetration testing
  • Network and infrastructure penetration testing (internal and external)
  • Cloud security testing (e.g. AWS, Azure, GCP)
  • Mobile application penetration testing
  • IOT penetration testing
  • OT penetration testing
• Execute assigned testing activities responsibly and professionally, following defined scopes, rules of engagement, and methodologies.
• Identify, validate, and exploit security vulnerabilities using industry-standard tools and manual techniques.
• Document findings clearly and accurately, including technical details, evidence, and remediation recommendations.
• Assist in preparing high-quality technical reports and contribute to executive-level summaries.
• Participate in engagement activities such as kick-off calls, scoping discussions, and post-engagement briefings where appropriate.
• Collaborate with team members during testing, including peer reviews and technical walkthroughs.
• Maintain detailed testing notes, logs, and artifacts to support quality assurance and reporting.
• Continuously develop technical skills across penetration testing, exploitation techniques, and security fundamentals.
• Stay current with emerging vulnerabilities, attack techniques, and offensive security tooling.
• Over time, support or participate in broader offensive security activities, such as:
  • Adversary simulation and red teaming exercises
  • Automation or tooling development
  • Security research and proof-of-concept development

Requirements

• Offensive Security Certified Professional (OSCP) certification is required.
• Strong understanding of penetration testing methodologies and ethical hacking principles.
• Solid foundations in:
  • TCP/IP networking
  • Operating systems (Windows and Linux)
  • Web application architecture and common vulnerabilities
• Exposure to scripting or programming (e.g. Python, Bash, PowerShell).
• Familiarity with common vulnerability classes (e.g. OWASP Top 10, misconfigurations, credential abuse).
• Basic understanding of Active Directory security concepts.
• Exposure to cloud platforms or containerised environments will be useful.
• Hands-on experience using common penetration testing tools (e.g. Burp Suite, Nmap, Metasploit, BloodHound).
• Ability to write clear, structured, and technically accurate documentation and reports.
• Strong desire to grow into advanced offensive security and red teaming roles.
• Strong analytical mindset and problem-solving skills.
• Professional conduct, integrity, and respect for confidentiality.