Careers
“We hire people who can be leaders, and we give them the client exposure, the hard problems, and the ownership to get there.”
Chad NelsonHead of Business Development01The work
We help SaaS companies close enterprise deals by building security programs that hold up to scrutiny. That means pen tests, red team engagements, compliance, vCISO work: whatever the client actually needs.
You'll work directly with founders and CTOs. You'll own engagements end-to-end. You'll get on calls with enterprise security teams and answer hard questions. When you find a vulnerability, it gets fixed. When you build a program, it gets used.
“Deliverables that influence. No checkbox compliance. Real problems, real impact.”
02What we look for
About you
- Own it.You take responsibility for your work and its outcomes. You own client relationships from start to finish. When something breaks, you fix it.
- Question it.You reason from first principles. You challenge assumptions, including ours. If industry best practice is wrong, you say so.
- Ship it.You communicate clearly, respond promptly, and deliver. You move with urgency because client problems don't wait.
03What we expect
Clients trust us with their deals and their data. These are the habits that keep that trust.
- 01
Empathy is required.
Clients come to us worried or overwhelmed. We make them feel capable, not stupid. They leave every interaction feeling better than before.
- 02
Evidence over opinion.
We care about ground truth. That means accurate risk models, first-principles thinking, and going against the grain when the data says to.
- 03
Communication isn't optional.
We respond to every client request within 24 hours. We never miss a client meeting. We say the difficult thing clearly.
- 04
Hard work, no shortcuts.
Excellence comes from doing the hard thing daily. Attention to detail. Personal responsibility. Determination.
04What you can expect
- Ownership from day one.Real client work, real responsibility. Your insights shape strategy, not just reports.
- A path to leadership.We build future CISOs. In 5-10 years, you'll have the experience to lead security programs anywhere.
- Autonomy with accountability.We trust you to make decisions. We expect you to communicate about trade-offs.
- Immediate feedback.You'll know when you're doing great work and when something needs adjustment. No annual review surprises.
- Competitive compensation.Boutique doesn't mean cheap. We pay market rates.
05Open roles
We're always interested in strong practitioners, even without a posted role. Tell us what you're great at.
- Security PractitionersPen testing, red team, cloud security, application security. Own engagements end-to-end.No open roles
- GRC / ComplianceSOC 2, NIST CSF, AI RMF. Know what auditors actually care about.No open roles
- vCISO / Security LeadershipClient-facing security strategy. Comfortable with CTOs and enterprise security teams alike.No open roles
Don't see your role? Introduce yourself anyway. We read every note.
Introduce yourselfGet started
Hiring, or looking for a security partner? Either way, we'd like to hear from you.
“Most companies don't need more security. They need the right security at the right time. We figure out what that is.”
