Consultant, Red Teaming

Ensign is hiring !

Red Team Engagements

- Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based security assessments.

- Translate relevant threats and customer risks into realistic attack scenarios.

- Perform reconnaissance, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations where authorised.

- Assess security controls across networks, endpoints, applications, cloud platforms, identity systems, and operational processes.

- Identify and demonstrate attack paths that could expose critical systems or business assets.

- Develop or adapt tools, scripts, payloads, and supporting infrastructure to achieve engagement objectives.

- Maintain operational security and minimise the risk of unintended disruption throughout each engagement.

Purple Team Engagements

- Collaborate with Blue Teams, Security Operations Centres, incident response teams, and other defensive stakeholders.

- Design and execute controlled attack scenarios to validate preventive, detective, and responsive security controls.

- Map simulated adversary behaviours to recognised frameworks such as MITRE ATT&CK.

- Evaluate security alerts, telemetry, logging coverage, investigation workflows, and response procedures.

- Help defensive teams develop and refine detection rules, use cases, playbooks, and response processes.

- Facilitate knowledge-sharing sessions to explain attacker techniques and strengthen defensive capabilities.

- Conduct validation and retesting to confirm that identified security gaps have been addressed.

- Document improvements and remaining areas of security exposure.

Engagement Planning and Governance

- Define engagement objectives, scope, assumptions, success criteria, and rules of engagement with relevant stakeholders.

- Ensure all activities are conducted within approved legal, ethical, safety, and customer-defined boundaries.

- Follow applicable change-control, data-handling, access-control, and escalation procedures.

- Maintain accurate records of actions, evidence, findings, and attack paths.

- Communicate critical findings, operational concerns, and potential business risks promptly.

- Coordinate with project managers, internal teams, and customer stakeholders throughout the engagement lifecycle.

Reporting and Stakeholder Communication

- Produce clear technical reports, executive summaries, attack narratives, and prioritised remediation recommendations.

- Explain technical findings in terms of their operational and business impact.

- Present engagement outcomes to technical teams, senior management, and executive stakeholders.

- Deliver engagement debriefs and remediation workshops where required.

- Support remediation planning, validation, and retesting.

Capability Development

- Contribute to the improvement of Red Team and Purple Team methodologies, tools, procedures, and knowledge bases.

- Research emerging threats, vulnerabilities, attack techniques, defensive approaches, and security technologies.

- Share technical knowledge, lessons learned, and good practices with team members.

- Support the development of reusable attack scenarios and detection-validation content.

Customer Engagement and Adaptability

- Deliver assignments of varying scope, complexity, and duration based on customer and business needs.

- Work at customer premises when required.

- Adapt to different industries, technologies, operating environments, and levels of security maturity.

- Remain flexible in supporting planned and ad-hoc project requirements.

- Communicate effectively with internal teams and customer stakeholders throughout each assignment.

- Offensive Security Certified Professional (OSCP) is required.

- Advanced or specialist certifications, such as OSEP, OSED, OSWE, CRTO, CRTE, CREST CRT/CCT, GPEN, GXPN, would be advantageous.

- Demonstrated experience in Red Teaming, Purple Teaming, adversarial simulation, penetration testing, or a related offensive security role.

- Strong knowledge of adversary tactics, techniques, and procedures, including the MITRE ATT&CK framework.

- Hands-on experience with network, Active Directory, Windows, Linux, web application, cloud, and identity-based attack techniques.

- Experience collaborating with defensive security teams to validate and improve security controls.

- Understanding of defensive technologies and processes, including SIEM, endpoint detection and response, network monitoring, security logging, threat hunting, and incident response.

- Proficiency with relevant commercial or open-source offensive security tools and frameworks.

- Ability to develop or modify tools and scripts using languages such as Python, PowerShell, Bash, C#, or another relevant programming language.

- Ability to analyse complex attack paths and translate technical findings into clear business risks and actionable recommendations.

- Strong report-writing, presentation, communication, and stakeholder-management skills.

- Sound professional judgement and a strong commitment to ethics, confidentiality, operational security, and authorised testing boundaries.

- Ability to work independently and collaboratively within multidisciplinary teams.

- Willingness and ability to undertake customer-facing assignments of varying duration, including working at customer premises when required.

- Flexibility to support ad-hoc assignments and changing project requirements.

- Eligibility to obtain any security clearance or customer-specific access approval required for assigned engagements.

- A degree or diploma in cybersecurity, computer science, information technology, or a related discipline is preferred; equivalent practical experience will also be considered.