Careers
Work where mistakes cost the most — and where you learn the most.
Environments of banks, public institutions and manufacturers. DORA audits, HA clusters, pentests against regulatory deadlines. A small team, direct contact with the board, no layers in between.
Open positions
Current job openings. Click to expand the details.
No opening for you? At the bottom of the page there is an open application form — we read every one.
Night Monitoring Operator (SOC / NOC)
IT Security · SOC 24/7
Katowice / remote
Night shifts · 12h rotation
Night Monitoring Operator (SOC / NOC)
IT Security · SOC 24/7About the role
Watch over the environments of banks, public institutions and manufacturers while they sleep. You take alerts from monitoring and SIEM, verify what is really happening, fix what is on the runbook and escalate the rest to on-call engineers.
What we expect
- Linux and Windows basics: services, logs, processes, disk space, networking
- Ability to work calmly under time pressure and to follow a procedure exactly
- Readiness for night shifts in a 12-hour rotation (including weekends and holidays)
- Clear written communication — your shift notes are read by the client and by the day team
- Experience with a monitoring tool (Zabbix, Grafana, Prometheus, Nagios) or a SIEM is a plus
- English at reading level (documentation, vendor tickets)
What we offer
- Night shifts paid at a premium, schedule planned a month in advance
- Full onboarding: runbooks, shadowing on shifts, a mentor from the SOC team
- Real career path: monitoring operator → SOC analyst L2 → SysOps or security engineer
- Company-paid certifications and training (Linux, Zabbix, security fundamentals)
- Work from the Katowice office or fully remote after the onboarding period
- Employment contract or B2B contract
Penetration Tester
IT Security · offensive
Katowice / remote
Remote
Penetration Tester
IT Security · offensiveAbout the role
Test web and mobile applications, infrastructure and cloud environments for banks, fintech companies and public institutions. You run the engagement end to end: scope, testing, report in language the board understands, and re-tests after the fixes.
What we expect
- Commercial experience in penetration testing (min. 2 years) — web, infrastructure or mobile
- Practical knowledge of OWASP Top 10, ASVS and the PTES methodology
- Ability to exploit a finding and to explain its business impact, not just its CVSS score
- Comfortable with Burp Suite, nmap, Metasploit and your own scripts (Python, Bash or Go)
- Reports written in Polish and English that a client can act on without a translator
- OSCP, eWPTX, CRTO or a similar certification — or a portfolio of CVEs, write-ups and CTF results
What we offer
- Engagements in regulated environments: DORA, NIS2, MiCA, TIBER-EU (TLPT) — not only WordPress sites
- Time booked in the schedule for research, tooling and CVE work
- Certification budget (OSCP, OSEP, CRTO) with study time during working hours
- A lab environment and licenses for professional tools
- Fully remote work with occasional on-site tests at client premises
- Employment contract or B2B contract, rate depending on experience
Why Remote Admin
What you get beyond your salary.
A 460-hour DORA audit, a zero-downtime migration, incident forensics at 3 a.m. Under NDA, but the experience stays on your CV.
An administrator can move into security, a pentester into audit. Rotating between areas is natural, because we work for the same clients.
RHCE, CKA, Veeam, OSCP, ISO 27001 Lead Auditor — training budget set individually, with study time during working hours.
24/7 work is a fact of life in our industry. On-call duty is paid separately, and the rotation is planned a month in advance.
An office 200 m from the Market Square in Katowice for those who want it; fully remote for engineers. Sales reps work hybrid, because clients like meeting in person.
An idea for a tool, a training course, a process change — you talk to the board, not a form. The decision usually comes the same week.
Recruitment
Three stages, two weeks at most.
30-min conversation
Online, with the area lead. About what you have done, what you want, and whether our projects are right for you.
Practical task
For engineers: a real scenario (e.g. an incident, a migration). For sales reps: a simulated conversation with an IT director. Paid if it takes more than 4 hours.
Meeting with the board and offer
Terms, contract type, start date. An answer within 3 business days — including a negative one, with reasons.
Open application
Don't see your position? Write to us anyway.
We are always looking for Linux/Windows administrators, pentesters, ISO 27001 auditors and SOC analysts. If you have experience in any of our three areas, we want to meet you.
You can also write to us directly: [email protected]