Careers

Disciplines we hire across

The company builds, secures and operates technology, so it hires across all three, and for the business functions that support that work. We value people who can work across more than one of these disciplines.

• Security operations: monitoring, detection engineering, threat hunting and incident response
• Offensive security: penetration testing, red teaming and application security testing
• Governance, risk and compliance: risk assessment, control design, readiness and audit support
• Software engineering: web, mobile, API and product development
• AI engineering: LLM applications, retrieval, agents, evaluation and AI security
• Cloud and platform engineering: infrastructure as code, containers, CI/CD and reliability
• IT operations: identity, endpoints, networks, collaboration platforms and support
• OT security: industrial network assessment, segmentation and monitoring
• Research: threat research, vulnerability research and security automation in Security Labs
• Business functions: finance and accounts, sales and marketing

How we work

Work is delivered remotely and on site, depending on the engagement. Some work, such as OT assessments and parts of incident response, requires time at client sites.

We run as an engineering organization. Work is reviewed by peers, methods are written down, and a finding or a design must be reproducible by someone else on the team.

Build, secure and operate teams work together. A tester can expect to sit with the engineers who will fix the finding. An engineer can expect a security review of a design before it is built.

What we look for

• Evidence of work done: systems built, findings written, detections shipped, incidents handled
• Clear writing, because every engagement ends in something a client has to read and act on
• Curiosity about the layers next to your own, whether that is code, cloud, identity, networks or industrial systems
• Care with client information and with access to client environments

Open roles

We are hiring for the following roles.

• Accountant
• OT Expert
• Sales
• Marketing

How to apply

Email careers@onioninfosec.com, or apply through the contact page and choose "Careers". Name the role you are applying for, or the discipline you work in, and tell us what you have done in it. If any of your work is public, such as code, research or talks, tell us where to find it.

The privacy policy explains how we handle personal data.