Build the future of
offensive security.

ExodusSec is a cybersecurity consultancy providing offensive security and risk validation services to help organizations identify, test, and remediate security vulnerabilities before they are exploited. We work with enterprises across financial services, technology, healthcare, and beyond — delivering real-world penetration testing by certified professionals.

We are seeking experienced B2B sales representatives to support client acquisition across the United States, with a focus on high-quality outbound lead generation. This is a performance-driven, fully remote engagement with uncapped earning potential and no micromanagement.

• Social engineering & phishing simulations
• Red team security assessments
• Vulnerability assessments & scanning
• Web application penetration testing
• Mobile application security testing
• External & internal network pen testing
• API security testing (REST, SOAP, GraphQL)
• Cloud security assessments (AWS, Azure, GCP)
• Wireless security testing
• Physical security testing

Recurring revenue opportunities through retesting engagements and ongoing security programs.

• Identify and engage prospective clients through outbound outreach
• Generate and qualify leads within target markets
• Book meetings with decision-makers across IT, security, compliance, and risk functions
• Hand off qualified opportunities to the ExodusSec technical team

All technical discussions, scoping, demonstrations, and closing support are handled by the founding team — your focus is pipeline generation.

• Proven experience in B2B or enterprise sales
• Background in IT services, cybersecurity, SaaS, or consulting sales preferred
• Ability to independently generate and manage a pipeline
• Strong outbound prospecting skills
• Existing network in IT, security, compliance, or risk functions is a strong plus

Interested candidates should provide a brief introduction including:

• Brief introduction and relevant experience
• Summary of B2B sales background
• Industries or networks currently engaged
• Any relevant performance history or deal examples

We are looking for skilled penetration testers and red team operators to join ExodusSec as contractors. You will conduct hands-on security assessments across a range of client environments — from web applications and cloud infrastructure to internal networks and physical premises. Engagements are project-based with competitive contractor rates.

• Web & mobile application penetration testing
• External & internal network assessments
• Red team and adversarial simulation engagements
• Cloud security testing (AWS, Azure, GCP)
• API security testing (REST, SOAP, GraphQL)
• Social engineering & phishing campaigns
• Physical security assessments
• Wireless network security testing
• Vulnerability assessments & scanning
• Post-engagement report writing

• Demonstrated hands-on penetration testing experience (minimum 2 years)
• Proficiency with industry-standard tools (Burp Suite, Metasploit, Nmap, BloodHound, Cobalt Strike or similar)
• Ability to write clear, detailed technical reports with actionable remediation guidance
• Strong understanding of OWASP, PTES, MITRE ATT&CK, and related frameworks
• Ability to work independently and manage engagement timelines

Please send your CV/resume, relevant certifications, and if available, a sample or summary of previous engagement reports (redacted as needed). We review all applications and respond to qualified candidates promptly.

ExodusSec is expanding its research capability. We are looking for Security Research Engineers who thrive on deep technical investigation — from original vulnerability discovery and exploit development to building internal tooling, threat intelligence, and published security research that advances the broader community.

This role is project-based and contractor-structured, with flexibility to work on research initiatives alongside client-facing deliverables.

• Original vulnerability research & CVE discovery
• Exploit development & proof-of-concept work
• Internal tooling & automation development
• Threat intelligence research & actor profiling
• Malware analysis & reverse engineering
• Attack framework research (MITRE ATT&CK)
• Published blog posts, advisories, & whitepapers
• Supporting client engagements with bespoke tooling

• Deep technical knowledge in one or more security domains (web, network, binary, cloud, mobile)
• Proficiency in at least one scripting or programming language (Python, Go, Rust, C/C++, or similar)
• Experience with vulnerability research methodologies and responsible disclosure processes
• Ability to clearly communicate complex technical findings in written form
• Strong self-direction and ability to manage independent research workstreams

Share your background, areas of research interest, any published work, CVEs discovered, or projects you're proud of. Links to GitHub, blog posts, conference talks, or write-ups are especially welcome.