A small team where operators do the work
We hire rarely and senior. There is no bench, no pyramid, and no one whose job is to supervise other people doing the interesting part.
Open positions
We post roles when we have them rather than collecting speculative applications indefinitely.
When positions open they appear here with the scope, the clearance requirement if any, and a salary range. We do not post roles we are not actively hiring for, and we do not run evergreen listings to build a pipeline.
If you are an OSCP-certified operator, a detection engineer, or a CMMC practitioner and you want to be considered when something opens, write to us through the contact form, choosing “Careers” as the topic, and tell us what you have actually built or broken. A CV without that is hard for us to assess.
How we hire
Four steps, and we tell you where you stand at each one.
Read what you sent
A real person reads it. We respond either way, including when the answer is no, because silence after an application is a discourtesy that costs nothing to avoid.
Technical conversation
A conversation, not a quiz. We want to hear about something you built, broke, or got wrong, and what you did next.
Practical exercise
Scoped to a few hours and paid. We do not ask candidates to do unpaid work, and we do not set exercises that are really client deliverables.
Offer
With the salary, the scope, and the expectations in writing.
What we look for
- Demonstrated technical depth over certification count
- Writing ability — reports are half the deliverable
- Willingness to say "I do not know" in front of a client
- Veterans and transitioning service members are specifically encouraged
What we offer
- Senior work from day one, with no bench time
- Direct client contact rather than working through an account layer
- Training and certification support, including OSCP
- A small team where your work is visible
Nothing posted, but worth a conversation?
Tell us what you have built or broken. That is more useful to us than a CV.