Careers

Careers in Practical SaaS Security

The Hidden Finds operates as a focused, founder-led security consultancy.

We work on SaaS platforms, APIs, access control reviews, business logic testing, and practical security research. We intentionally keep the team small and prioritize quality over volume.

Small Specialist TeamManual Security WorkResearch MindsetRemote-Friendly
security.craft
01ResearchInvestigate product behavior
02Manual TestingValidate realistic attack paths
03Clear WritingMake findings useful
Open Positions

No Active Openings Today

We do not hire frequently. When positions become available, they will be listed here. In the meantime, experienced security professionals, researchers, and engineers are welcome to introduce themselves.

Research

Application Security Research

Experience with access control, IDOR/BOLA, authentication, APIs, GraphQL, and business logic testing.

Communication

Clear Technical Communication

Ability to write reports, explain impact, provide remediation guidance, and communicate with engineering teams.

Mindset

Practical Security Mindset

Preference for manual testing, validation over assumptions, real attack paths, and product-focused thinking.

Future Opportunities

Roles May Be Posted Here In The Future

Potential opportunities may expand as the consultancy grows. These are areas of interest, not currently active vacancies.

Not Currently Hiring
Potential Role

Application Security Consultant

Potential Role

Security Researcher

Potential Role

API Security Specialist

Potential Role

Technical Security Writer

Potential Role

Security Operations Support

What We Value

How We Approach Security Work

Practical judgment, curiosity, clear communication, and professionalism matter more than collecting credentials.

01

Practical Thinking

Focus on realistic security outcomes.

02

Curiosity

Ability to investigate and learn independently.

03

Communication

Strong written and verbal communication.

04

Professionalism

Respectful collaboration and accountability.

Introduce Yourself

Introduce Yourself

If your background aligns with SaaS security, application security testing, API security, or technical security research, feel free to send a short introduction.

Name & LocationRelevant ExperienceLinkedIn ProfilePortfolio or Write-Ups