Ensign is hiring ! Red Team Engagements - Plan and conduct authorised Red Team engagements, adversarial simulations, and objective-based security assessments. - Translate relevant threats and customer risks into realistic attack scenarios.
- Perform reconnaissance, initial-access testing, social engineering, privilege escalation, lateral movement, persistence, and data-access simulations where authorised. - Assess security controls across networks, endpoints, applications, cloud platforms, identity systems, and operational processes. - Identify and demonstrate attack paths that could expose critical systems or business assets.
- Develop or adapt tools, scripts, payloads, and supporting infrastructure to achieve engagement objectives. - Maintain operational security and minimise the risk of unintended disruption throughout each engagement. Purple Team Engagements - Collaborate with Blue Teams, Security Operations Centres, incident response teams, and other defensive stakeholders.
- Design and execute controlled attack scenarios to validate preventive, detective, and responsive security controls. - Map simulated adversary behaviours to recognised frameworks such as MITRE ATT&CK. - Evaluate security alerts, telemetry, logging coverage, investigation workflows, and response procedures.
- Help defensive teams develop and refine detection rules, use cases, playbooks, and response processes. - Facilitate knowledge-sharing sessions to explain attacker techniques and strengthen defens