Skip to content

Careers

Build the practice with us

We hire for judgement and written clarity as much as technical depth. Certifications are welcome; demonstrated reasoning matters more.

Actively reviewing applications

Open roles

Senior Penetration Tester

Offensive Security · Remote · Full-time

Apply by email

Lead web, cloud and network engagements end to end, from scoping through remediation support.

  • · Demonstrable manual testing depth across web and cloud
  • · Clear written reporting for mixed technical audiences
  • · Comfortable owning client communication during an engagement
  • · Offensive certification (OSCP or equivalent) welcomed, not required

DFIR Analyst

Incident Response · Remote / Hybrid · Full-time

Apply by email

Respond to live incidents, acquire and analyse evidence, and drive root-cause conclusions.

  • · Disk, memory and cloud log analysis experience
  • · Rigorous evidence handling and documentation habits
  • · Calm judgement under incident pressure
  • · Participation in an on-call rotation

Detection Engineer

Managed Detection & Response · Remote · Full-time

Apply by email

Build and tune detections mapped to ATT&CK, and validate them with purple-team replay.

  • · SIEM query and rule authoring experience
  • · Understanding of adversary tradecraft
  • · Automation-minded approach to triage toil

GRC Consultant

Advisory · Remote · Contract or full-time

Apply by email

Guide clients through ISO 27001, SOC 2 and sector framework readiness.

  • · Hands-on framework implementation experience
  • · Ability to translate control language into engineering tasks
  • · Audit or assessor exposure is a plus

How we work

  • · Remote-first with asynchronous defaults
  • · Dedicated research and certification budget
  • · No billable-hour targets that compromise quality
  • · Rotational on-call with genuine time back

No suitable role listed? Send a short note about the work you want to do - we keep speculative applications on file for six months.