Job description
Ensign is hiring !
Key Responsibilities
- Penetration Testing & Security Assessments Conduct penetration testing on: Web applications (OWASP Top
- Mobile applications (iOS / Android) Internal and external networks APIs and web services Cloud environments (AWS, Azure, GCP) Perform vulnerability assessments using automated and manual techniques. Simulate real-world attack scenarios including privilege escalation and lateral movement.
- Exploitation & Validation Identify and exploit security weaknesses in systems and applications. Develop proof-of-concept (PoC) exploits to validate findings. Assess impact and risk severity of vulnerabilities discovered.
- Reporting & Documentation Prepare detailed penetration testing reports including: Executive summary Technical findings Risk ratings Remediation recommendations Present findings to technical teams and management. Provide remediation validation (retest) services.
- Tools & Techniques Utilize industry tools such as: Burp Suite Metasploit Nmap Nessus / OpenVAS Wireshark SQLmap Kali Linux toolsets Develop custom scripts (Python, Bash, PowerShell) where necessary. Stay updated on latest attack techniques, CVEs, and threat trends.
- Compliance & Standards Conduct testing aligned with: OWASP Testing Guide PTES (Penetration Testing Execution Standard) NIST frameworks ISO 27001 controls Support compliance-driven assessments (e.g., PCI-DSS).
Requirements
Bachelor’s Degree in Cybersecurity, Computer Science, IT, or related field. Experience 2–5 years of experience in penetration testing or offensive security. Hands-on experience conducting web and network penetration tests. Experience preparing formal penetration testing reports. (Senior level: 5+ years with leadership or project ownership experience.)