Adversarial work
You test real systems with the techniques real attackers use, inside a scope that protects everyone involved.
Home / Careers
Careers
Work on the offensive side, legitimately.
We are a small team of operators, researchers and analysts. The work is adversarial, the authorisation is real, and the reporting has to be good enough that someone can act on it.
Research time
Malware recovered from engagements goes to our own R&D. Analysis is part of the job, not a side project.
Small team
Direct access to the founder and to the people who decide what work we take.
24/7 operation
The Operations Center runs every hour of the year, so shift patterns exist and are compensated.
Open roles
Currently hiring.
Nothing here fits? Tell us what you would own: careers@blackbourneco.com
What we look for
Capability and judgement.
- Demonstrable skill — a certification is not a substitute for work we can look at
- The ability to write a finding a developer can act on without asking you a question
- Comfort operating inside a written scope, and the discipline to stop at the boundary
- Curiosity about the human layer, not only the technical one
- For operations roles: willingness to work a shift pattern, because the centre never closes
Process
Four stages, about two weeks.
- Intro call — background and what you want to work on.
- Technical exercise — a realistic problem in the discipline you are applying for.
- Written exercise — turn your findings into something a client could read.
- Team conversation — your questions about the work and how we operate.
We ask about authorisation. In the technical exercise we are as interested in where you stopped as in what you found. Working outside a scope is a disqualifier here, however good the finding.
Send us work, not just a CV.
If you have a write-up, a tool, a CVE or a research note you are proud of, include it. We read everything that comes in.