Ensign is hiring !
Duties and Responsibilities
- Deliver Vulnerability Management as a Service (VMaaS) as a dedicated consultant: recurring scanning, finding validation, risk-based prioritisation, and remediation reporting to the client.
- Perform vulnerability assessments and penetration testing across a range of technologies including Network, Web, Mobile, Thick Client, and Cloud.
- Review and assure the quality of VAPT deliverables produced by the team before client release.
- Act as first responder for Incident Response engagements: triage, containment, forensic analysis, and threat hunting.
- Support presales activities, including client scoping discussions, technical solutioning, effort sizing, and proposal drafting.
- Mentor consultants on technical execution and on clear communication of vulnerabilities and remediation to clients.
Requirements
- Familiarity with cyber security principles (networking, web, mobile, vulnerability classes) and industry frameworks (OWASP Top 10, MITRE ATT&CK).
- Experienced in consulting, both internal and client facing.
- Ability to independently lead an engagement and communicate with clients.
- Familiar with scripting languages such as Python, Bash, and PowerShell.
- Hold relevant offensive and defensive cybersecurity certifications.
- Ability to travel overseas when required.
Preferred Qualifications / Skills
- At least 10 years of information security experience across offensive and defensive work.
- Offensive certifications: OSCP, OSCE, OSWP. Defensive and IR certifications: OSTH, OSIR, GCIH, GSEC.
- Proficient with security testing tools such as Nessus, Burp Suite, and Frida.
- Mobile application security testing for Android and iOS, delivered to OJK compliance standard.
- Incident handling, malware analysis, and threat hunting experience.
- Track record building and leading a Security Operations Centre (SOC).
- Proven trainer and mentor able to grow local team capability.
Skills Required
- Familiarity with cyber security principles (networking, web, mobile, vulnerability classes)
- Familiarity with industry frameworks (OWASP Top 10, MITRE ATT&CK)
- Experienced in consulting, both internal and client facing
- Ability to independently lead an engagement and communicate with clients
- Familiar with scripting languages such as Python, Bash, and PowerShell
- Hold relevant offensive and defensive cybersecurity certifications
- Ability to travel overseas when required
- At least 10 years of information security experience across offensive and defensive work
- Offensive certifications: OSCP, OSCE, OSWP
- Defensive and IR certifications: OSTH, OSIR, GCIH, GSEC
- Proficient with security testing tools such as Nessus, Burp Suite, and Frida
- Mobile application security testing for Android and iOS, delivered to OJK compliance standard
- Incident handling, malware analysis, and threat hunting experience
- Track record building and leading a Security Operations Centre (SOC)
- Proven trainer and mentor able to grow local team capability
What We Do
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region
