Skip to content

Careers

Teach Nemesis to think like an attacker

Verixian is building Nemesis to run AI-driven security engagements. We are looking for ethical hackers and red teamers with real offensive security experience, to turn the way they think about a target into how every engagement runs.

At a glance

  • Open applications, no listed roles
  • Remote, within European time zones
  • Alongside coordinated AI agents
  • Authorized work only

Who we are looking for

Experience earned on the attacking side

We are looking for people who have done this work hands-on, on authorized engagements, and who can explain what they found.

  • Hands-on ethical hacking

    You find weaknesses and prove them, across web applications, APIs, networks and cloud.

    • Web applications
    • APIs
    • Networks
    • Cloud
  • Red team and adversary emulation

    You have emulated real adversaries end to end, working toward an objective within agreed rules of engagement.

    • Adversary emulation
    • Objectives
    • Rules of engagement
  • An offensive security mindset

    You think in attack paths: how one weakness leads to the next, and how small issues chain into real impact.

    • Attack paths
    • Chained weaknesses
    • Impact
  • Writing someone else can act on

    You explain what you found, why it matters and how to fix it, clearly enough for another team to act on without you.

    • Evidence
    • Impact
    • Remediation

Nice to have

  • OSCP
  • OSEP
  • CRTO
  • CTF experience
  • Bug bounty experience

Helpful, not required.

What you would work on

Turn your expertise into how engagements run

Nemesis runs each engagement with coordinated AI agents working in parallel. You would work alongside them, shaping how an engagement approaches a target, what counts as proof and what a client receives.

  • How engagements are run

    Bring your method to how an engagement maps the authorized surface and goes looking for weaknesses, the way an experienced attacker would.

  • How weaknesses are proven

    Help decide what counts as proof. A finding is reported only once an independent verification step has re-proven it, and unproven leads never reach a client.

  • How findings are written up

    Shape how every verified finding reaches the client, with the evidence, severity, impact and remediation guidance a team needs to act.

How we work

What to know before you apply

  • Remote, within European time zones

    The work is remote. We are looking for people based within European time zones.

  • Open applications

    There are no listed openings. If the profile above sounds like you, send an open application.

  • Authorized work only

    Nothing runs until a client has authorized the scope in writing, and the work stays inside that scope.

    How we keep engagements safe

Sound like you?Send an open application

Apply

Send us an open application

Tell us about your experience in your own words. There is no role to match, so focus on what you do best.

What helps

  • The kinds of systems you have assessed, and how you proved what you found.
  • How you think about a target: where you would start, and what you would chain.
  • Links rather than files: a profile, a repository, write-ups or your CV.

Your application

Main area of experience (optional)

Add more than one by separating them with spaces.

A few short paragraphs are enough. Leave out client names and anything confidential.

We use these details only to consider your application. Read how we handle them in our privacy policy.