five roles open
We grow at about four people a year and every one of them shadows engagements for a quarter before running one. If that sounds slow, it is, and it is the reason the work is good.
- open roles
- 5
- process
- Paid trial day
- research time
- 20%, contractual
senior penetration tester
Full time
You have run engagements end to end and written reports people actually acted on. You care more about whether a finding is exploitable than about whether a scanner flagged it.
red team operator
Full time
You have spent weeks inside an estate without being caught, and you can explain to a defender exactly how you did it without making them feel stupid.
cloud security engineer
Full time
You can read an IAM policy the way other people read prose, and you would rather send a pull request than a finding.
security researcher
Full time · 20% research time
You take things apart. Firmware, protocols, whatever is in front of you. You will publish under your own name.
report editor
Part time
You are a technical editor who can tell when a paragraph is hiding uncertainty. No security background required; we will teach you the domain.
the terms, written down before you ask
Twenty per cent research time
Not a perk with an asterisk. It is in the contract, it is protected, and the thirty-seven CVEs on the research page came out of it.
Utilisation capped at eighty per cent
Testers stop finding interesting things above that, and we would rather have the findings than the margin.
You publish under your own name
Advisories carry the researcher's name, not the company's. The work follows you if you leave.
Conference travel, two a year
Attending or speaking, your choice, and we cover the time as work rather than leave.
Employee ownership after two years
Equity in an independent company with no investors waiting for an exit.
Four-day weeks in August
The whole company, every year. It has not hurt anything yet.
none of these fit
Send us something you have broken and how you did it. We read every one of these, and two of our principals arrived this way.