Now Recruiting

Join the
Red Team.

We operate at the edge of offensive security. We're looking for people who think like attackers, operate with precision, and take the mission seriously.

WHY EZASEC

Built for Operators,
Not Analysts.

Every engagement is real-world. Every technique is live. We don't do simulations — we do full-scope operations.

🎯
Full-Scope Operations
No limited-scope checkbox pentests. You work real adversary simulations — physical, cyber, social — end to end.
⚙️
Custom Tooling
Build and deploy your own implants, evasion techniques, and recon tooling. We invest in your offensive R&D.
🔒
Confidential Work
High-trust clients. Fortune-level targets. Every engagement operates under mutual NDA with full legal authorization.
🌍
Remote-First
Work from anywhere. Most engagements are conducted remotely, with on-site operations covered including travel.
📈
Competitive Pay
Performance-based compensation with transparent structure. Operators who deliver get paid accordingly.
🧠
Grow With Every Op
Access to internal research, tooling libraries, and debrief sessions after every engagement. You leave every op knowing more than when you started.
OPEN POSITIONS

Current Openings.

Don't see your role? Submit a general application — we review all profiles against upcoming engagements.

Pentester / Bug Bounty Researcher
● Open Remote Offensive Security Revenue Share
Apply →
// No employer, no employee. Just a small team sharing the same goal and splitting every bounty we find.
// WHAT WE DO
  • → Web, API & network vulnerability research
  • → Bug bounty programs (HackerOne, Bugcrowd, Intigriti)
  • → Collaborative recon and target analysis
  • → Independent work or team collaboration — both work
// WHAT WE LOOK FOR
  • → Web security knowledge (XSS, SQLi, IDOR, SSRF, OWASP Top 10)
  • → Familiarity with Burp Suite, Nmap, Nuclei or similar
  • → Ability to write clear vulnerability reports
  • → Self-driven — no micromanagement
// NICE TO HAVE
  • → Prior bug bounty submissions (even small findings count)
  • → CTF background (HackTheBox, TryHackMe) — advantage
  • → Scripting skills (Python, Bash) — advantage
  • → Any security cert (eJPT, CEH, OSCP) — advantage
// WHAT YOU GET
  • → Equal revenue share from every bounty submitted
  • → Real-world experience on live targets
  • → Team to collaborate with and grow alongside
  • → Full flexibility — remote, async, no fixed hours
APPLY

Submit Your Application.

01
Confidentiality
All applications are handled confidentially. Your CV is reviewed only by the EzaSec team and never shared.
02
Response Time
We review every application. Shortlisted candidates are contacted within 5 business days.
📄
Click to upload
or drag & drop your CV
PDF / DOC / DOCX
✓ APPLICATION RECEIVED — We'll review your profile and be in touch within 5 business days.
✗ SUBMISSION FAILED — Please try again or email us directly.