Careers
Careers in Practical SaaS Security
The Hidden Finds is a solo, founder-led security practice.
I work on SaaS platforms, APIs, access control reviews, business logic testing, and practical security research. The practice is deliberately small. Quality of work matters more than volume of engagements.
Solo Specialist PracticeManual Security WorkResearch MindsetRemote, Worldwide
Open Positions
No Active Openings Today
I am not hiring at the moment. If that changes, roles will be listed here. In the meantime, experienced security professionals, researchers, and engineers are welcome to introduce themselves.
Application Security Research
Experience with access control, IDOR/BOLA, authentication, APIs, GraphQL, and business logic testing.
Clear Technical Communication
Ability to write reports, explain impact, provide remediation guidance, and communicate with engineering teams.
Practical Security Mindset
Preference for manual testing, validation over assumptions, real attack paths, and product-focused thinking.
Future Opportunities
Roles May Be Posted Here In The Future
Potential opportunities may expand as the consultancy grows. These are areas of interest, not currently active vacancies.
Not Currently HiringApplication Security Consultant
Security Researcher
API Security Specialist
Technical Security Writer
Security Operations Support
What I Value
How I Approach Security Work
Practical judgment, curiosity, clear communication, and professionalism matter more than collecting credentials.
Practical Thinking
Focus on realistic security outcomes.
Curiosity
Ability to investigate and learn independently.
Communication
Strong written and verbal communication.
Professionalism
Respectful collaboration and accountability.
Introduce Yourself
Introduce yourself
Work in SaaS, application, API or technical security research? Send me a short introduction.
Name & LocationRelevant ExperiencePortfolio or Write-Ups