Join Hodeitek's red and blue team

Responsibilities

• Design and run red team operations and web, mobile, and infrastructure pentests in critical environments.
• Chain vulnerabilities to real business impact, including post-exploitation, lateral movement, and EDR/XDR evasion.
• Write reports that translate the technical finding into risk a CISO or leadership can act on.
• Defend the engagement's approach and reasoning in the client debrief, not just hand over a PDF.

Requirements

• Demonstrable experience in red teaming or offensive pentesting in critical environments.
• Hands-on knowledge of C2, post-exploitation, and EDR/XDR evasion.
• Ability to automate the repetitive in Python or Go and leave reusable tooling behind after every engagement.
• Clear communication of technical risk in business terms.

Nice to have

• Offensive certifications such as OSCP, OSEP, OSWE, OSWP, CRTE, or BSCP.
• Published exploits or tooling of your own, CVEs, or verifiable writeups.

Responsibilities

• Hunt threats over real data, telling anomalies from false positives under pressure.
• Write and maintain Sigma/YARA rules and detection correlations.
• Manage and triage EDR/XDR and SIEM alerts for clients in production.
• Join joint debriefs with the red team to close the offense/defense loop.

Requirements

• Experience in SOC L2/L3 or threat hunting with SIEM/EDR in production.
• Command of Sigma/YARA and endpoint telemetry analysis.
• Judgment to tell a real anomaly from noise under pressure.

Nice to have

• Experience with Sekoia.io or another SIEM/XDR, and EDR such as Bitdefender/Kaspersky.
• Python scripting to automate detection and response.
• Mapping detections to MITRE ATT&CK.

Responsibilities

• Develop and fine-tune AI models for threat analysis and detection.
• Deploy those models on our own European infrastructure, without sending data to third parties outside the EU.
• Connect models to SIEM, SOAR, EDR, and a client's existing data sources.
• Automate analysis and report/notification drafting that an analyst does by hand today.

Requirements

• Experience in applied ML/AI, ideally over security or operations data.
• Solid Python and experience deploying models to production.
• An eye for data sovereignty: self-hosted models on our own/EU infrastructure.

Nice to have

• Experience with Ollama or other self-hosted LLM stacks.
• Knowledge of SOAR and databases such as Postgres or ClickHouse.

Responsibilities

• Implement ISMS, security master plans, and compliance roadmaps for NIS2, ENS, DORA, and ISO 27001.
• Write real deliverables — policies, procedures, risk matrices — not filler reports.
• Translate regulatory requirements into verifiable technical and organizational controls with the technical team.

Requirements

• Experience in GRC consulting or regulatory compliance (ISO 27001, ENS, NIS2, or DORA).
• Ability to produce concrete deliverables without relying on generic templates.

Nice to have

• ISO 27001 Lead Implementer or Lead Auditor certification.
• Experience in financial services (DORA) or the public sector (ENS).

Responsibilities

• Build and maintain HodeiShield: tenant isolation, RBAC, billing, customer portal, and admin panel.
• Work full-stack on the product, from the database to the interface.
• Ship to production the real workflows the SOC and GRC teams run today, working directly with them.

Requirements

• Full-stack experience with TypeScript/Node and React/Next.js in production.
• Knowledge of Postgres and deployment on Kubernetes or the cloud.

Nice to have

• Prior experience building cybersecurity product (SIEM, SOAR, EDR).
• Go and experience with ClickHouse.