Offensive security
Penetration testing and red team operations across web, API, network, cloud and OT — manual work, written up properly, retested after the fix.
Join us
Build a career in cybersecurity
We hire curious, ethical people who love to learn. Don't see a perfect fit? Apply anyway — we're always interested in great talent.
No open roles right now
We're always keen to meet talented people. Send us your details and we'll be in touch.
Get in touch
How we hire
What the process actually looks like
We keep hiring short and practical. There is no take-home project that quietly costs you a weekend, and no panel of interviews that repeats the same questions.
- Application. Send a CV through the form on this page, or to our contact page if nothing is open. Tell us what you have actually worked on — a home lab, a CTF placement, a write-up and a bug you are proud of all count.
- Technical conversation. A working session with someone who does the job day to day. We talk through how you approach a target or an alert, not whether you memorised a port number.
- Practical exercise. A short, scoped task in the area you would be working in — a scenario to triage, or a small application to look at. Timeboxed, and we discuss your reasoning afterwards.
- Offer and start. Scope, expectations and reporting lines agreed in writing before day one.
What we look for
Curiosity first, certificates second
Certifications help, but they are not what gets someone hired here. The people who do well on our team share a few traits:
- They finish the thought. Finding something odd is the easy part. Working out whether it matters, proving it, and explaining it to someone who has to fix it is the job.
- They write clearly. Every engagement ends in a report that a client acts on. An unreadable finding is an unfixed finding.
- They stay inside the scope. Offensive work runs on trust and a signed statement of work. We hire people who treat both as non-negotiable.
- They keep learning in public. Write-ups, lab notes, tooling, teaching — the habit matters more than the platform.
Disciplines we hire into
Security operations
SOC monitoring, alert triage, threat hunting and incident response, including the detection engineering that comes out of each engagement.
Governance & compliance
Risk assessments, security audits and the practical side of getting an organisation ready for a framework without drowning it in paperwork.
Academy & training
Course design, lab building and mentoring for TechBiz Academy — taught by people who still do the work, not only teach it.
Starting out
If you have no commercial experience yet
Most people asking about a first security job are stuck in the same place: every posting wants experience, and nothing offers a way to get it. Our academy exists partly to break that loop.
The internship programmes run on scheduled tasks with graded submissions and a verifiable certificate at the end — SOC analyst and ethical hacking tracks, with hands-on labs rather than slides. It is a real body of work you can point an interviewer at, including ours.
We do not promise a job at the end, and we will not pretend otherwise. What we can say is that we know the people who come through it, and we have hired from it.