Careers · Work at XPLT
Senior operators who also teach.
We are a small team of practising operators. Whoever works here runs engagements, writes reports and passes what they learn on to teams. If none of the roles fit, we still read speculative applications.
Roles
Penetration Tester (senior)
Web, network, Active Directory, cloud. You run engagements independently, write the report yourself and present it to the client. No juniors on live engagements.
Red Team Operator
Adversary emulation over longer horizons, TIBER-EU and DORA TLPT context, social engineering and physical access as part of the chain.
Trainer / operator dual role
Everyone here teaches. You deliver OffSec and XPLT formats to teams and bring practice from live engagements into the room.
How we work
- →Remote-first across the DACH region, with the Pentest Penthouse in Frankfurt/Eschborn as the meeting point.
- →Hubs in Frankfurt, Dubai and Reykjavík - travelling between them is possible, not mandatory.
- →Quality over utilisation: our KPI is a report the client understands without follow-up questions.
- →Training is planned in, not applied for - including OffSec courses and exam attempts.
Apply