Careers at TrustLayerLabs
We are offensive cybersecurity practitioners, penetration testers, and compliance specialists who test the attack vectors automated scanners miss. Learn about our engineering philosophy and submit your profile to our talent pool.
Current Opportunities
Active hiring status and open positions at TrustLayerLabs
No Open Roles at This Time
Our core security architecture and assessment team is currently fully staffed. We do not have active full-time job openings at the moment.
Join Our Talent Pool for Upcoming Sprints & Future Roles
As our client volume and assessment scopes expand, we periodically engage specialized offensive practitioners, penetration testers, and GRC advisors for sprint-based assessments and upcoming roles. When new openings arise, we contact candidates from our talent pool directly before posting publicly.
Specializations We Actively Maintain in Our Talent Network:
API & SaaS Penetration Testing
Manual authorization testing targeting REST, GraphQL, and microservice APIs (BOLA/IDOR, JWT flaws, multi-tenant database boundary leaks, and cURL exploit development).
Web & Mobile Application Security
In-depth testing of modern Single Page Applications (Next.js, React, Vue) and mobile apps (Android APK & iOS IPA) covering OWASP Top 10, Frida hooks, and MASVS controls.
GRC & Security Compliance Advisory
Guiding high-growth startups through SOC 2 Type II readiness, ISO/IEC 27001:2022 gap analysis, cloud IAM policy review, and vendor security assessments.
Vulnerability Research & Tooling
Discovering novel business logic vulnerabilities, building open-source developer security tools, and authoring in-depth technical advisories.
Want to be considered for future engagements or roles?
Send your CV, GitHub, HackTheBox, or research portfolio to our Lead Security Architects.
Our Engineering Philosophy & Culture
What drives our testing methodology and team environment
Logic Verification Over Scanners
We don't run automated scanners and copy-paste vendor PDFs. We test complex business logic, authorization boundaries (BOLA/IDOR), and multi-tenant flows that demand human intelligence.
True Remote-First Flexibility
Work from anywhere in India or remotely worldwide. We prioritize deep focus, verified vulnerability PoCs, and high-quality deliverables over arbitrary office hours.
Practitioner Mentorship
Collaborate directly with our founders and certified lead architects (IIT Guwahati, CWL C3SA, ISO/IEC 27001 Lead Auditor). No layers of corporate bureaucracy.
Continuous Learning & Research
We actively sponsor industry credentials (OSCP, C3SA, CEH) and encourage our team to publish security advisories, vulnerability research, and technical guides on our blog.
Our Zero-Bureaucracy Evaluation Process
When positions open, our process is fast, respectful of your time, and focused entirely on offensive tradecraft.
Talent Pool Review
When an upcoming assessment sprint or vacancy opens, our Lead Security Architect reviews submissions from our talent pool first before public listings.
Technical Conversation
A 45-minute discussion focusing on real vulnerabilities you've uncovered, attack methodologies you enjoy, and how you approach complex application logic.
Practical Logic Challenge
No generic algorithmic puzzles. You'll evaluate a sanitized API endpoint or vulnerable code snippet and describe how you would exploit and fix it.
Offer & Kickoff
Transparent compensation, clear expectations, flexible remote setup, and direct onboarding into our offensive testing workflow.
Submit Your Profile to the Talent Pool
If you are an exceptional security researcher, penetration tester, or compliance advisor passionate about manual vulnerability discovery, we would love to keep your details on file.
Direct Email Submission:
1. Email: ceo@trustlayerlabs.co.in
2. Subject: [Talent Pool] Your Specialization - Your Name
3. Attach: Resume + links to GitHub / HackTheBox / Bugcrowd / Research