About this role
Ensign is hiring ! Key Responsibilities 1. Penetration Testing & Security Assessments
• Conduct penetration testing on:
• Web applications (OWASP Top 10)
• Mobile applications (iOS / Android)
• Internal and external networks
• APIs and web services
• Cloud environments (AWS, Azure, GCP)
• Perform vulnerability assessments using automated and manual techniques.
• Simulate real-world attack scenarios including privilege escalation and lateral movement.
2. Exploitation & Validation
• Identify and exploit security weaknesses in systems and applications.
• Develop proof-of-concept (PoC) exploits to validate findings.
• Assess impact and risk severity of vulnerabilities discovered.
3. Reporting & Documentation
• Prepare detailed penetration testing reports including:
• Executive summary
• Technical findings
• Risk ratings
• Remediation recommendations
• Present findings to technical teams and management.
• Provide remediation validation (retest) services.
4. Tools & Techniques
• Utilize industry tools such as:
• Burp Suite
• Metasploit
• Nmap
• Nessus / OpenVAS
• Wireshark
• SQLmap
• Kali Linux toolsets
• Develop custom scripts (Python, Bash, PowerShell) where necessary.
• Stay updated on latest attack techniques, CVEs, and threat trends.
5. Compliance & Standards
• Conduct testing aligned with:
• OWASP Testing Guide
• PTES (Penetration Testing Execution Standard)
• NIST frameworks
• ISO 27001 controls
• Support compliance-driven assessments (e.g., PCI-DSS).
Requirements
• Bachelor’s Degree in Cybersecurity, Computer Science, IT, or related field.
Experience
• 2–5 years of experience in penetration testing or offensive security.
• Hands-on experience conducting web and network penetration tests.
• Experience preparing formal penetration testing reports.
(Senior level: 5+ years with leadership or project ownership experience.)