Jobs · Remote

Join the red team businesses count on.

We test businesses and the partners who resell our work, and we stay with them all year: a live portal, retests on demand, every finding checked by a person. We are hiring four remote roles, two that break in and two that bring the work.

Apply now See the roles

CREST-certified operators · OSCP holders · 1,000+ tests delivered · our researcher named in Apple’s Web Server Security Acknowledgements

Open roles

Four remote roles

Delivery · Remote

Penetration Tester

You run web, API, network and cloud penetration tests for businesses in the UK, Switzerland and beyond, and write findings a developer can fix the same week.

You

You have run penetration tests for paying clients, not only labs and CTFs.
You hold OSCP, CREST CRT/CPSA or equivalent, or can show the work that would earn it.
You write a finding so the reader knows the risk, the evidence and the fix without calling you.
You work well alone across time zones and keep a client informed without being chased.

The work

Scoped engagements with a fixed objective, delivered through our client portal.
Every finding human-verified before it reaches a client.
Retests on demand for twelve months after each engagement.
Work for direct clients and for partners who resell our testing under their own brand.

Apply for Penetration Tester →

Delivery · Remote

Red Team Operator

You take one objective, a database, a payment system, a director’s mailbox, and reach it by any route the client allows: people, network, cloud and suppliers.

You

You have led or played a lead part in red team or adversary simulation engagements.
You hold CRTO, OSEP, CREST CCT/CCSAS or equivalent, or can show engagements that prove the level.
You keep a timestamped record of every step, because the client measures their monitoring against it.
You can explain an attack chain to a board in plain words and to an engineer in detail.

The work

Objective-based engagements scoped with the client on a call.
AI red teaming: attacking LLMs, agents and copilots as a new route in.
A report that shows the chain, the dwell time and the fix for each link.
Remote by default; on-site work only when an engagement needs it and the client covers it.

Apply for Red Team Operator →

Growth · Remote

Cold Caller / SDR

You call security buyers and IT leads at UK and Swiss businesses and book scoping calls with our team. You get a call sheet, a script and an answer sheet for every question about what we sell.

You

You have made outbound B2B calls for a living and can share your numbers.
You stay calm with a sceptical IT manager and know when to stop talking.
You speak fluent English. German is a strong plus for the Swiss list.
You report honestly which numbers reached a person and which did not.

The work

Researched call lists with direct numbers, not switchboards.
One goal per call: a booked scoping call with our team.
Feedback on every list so the next one is better.
Flexible hours inside UK and Swiss business time.

Apply for Cold Caller / SDR →

Growth · Remote

Partner & Sales Manager

You sign and look after MSPs, IT consultancies and resellers who sell our penetration testing under their own brand, and you help them win their first deals.

You

You have sold through channel partners, MSPs or resellers, ideally in IT or security.
You can explain a wholesale model so a partner sees their margin in the first five minutes.
You follow up without being asked and keep a clean pipeline.
You work from the UK, Switzerland or a time zone close to them.

The work

A white-label offer partners can resell at their own price.
Delivery handled by our operators, on time, under the partner’s brand.
A partner portal and findings that drop straight into their ticketing.
Direct access to the founders and the delivery team.

Apply for Partner & Sales Manager →

Apply for a role.

Pick the role, tell us what you have done, and send a link to your CV or work. A person reads every application and replies within five working days.

Before you apply

Applying, answered

Are the roles remote?

Yes. All four roles are remote. Delivery roles may include on-site work when an engagement needs it, agreed in advance.

How do I apply?

Use the form on this page. Pick the role, add your LinkedIn profile and a link to your CV, portfolio or GitHub, and tell us what you have done that fits.

When will I hear back?

A person reads every application. We reply within five working days, whether or not we take it further.

Do I need certifications?

For the delivery roles, certifications help but are not the only proof. Real engagements, published research or a strong bug bounty record count too. The sales roles need a track record, not certificates.

What happens to my data?

We use your application only to assess it and delete it after 12 months. See the privacy policy for details.