Work on real cases,
not checkbox reports.
A small team of practitioners building a forensic program a company can simply have, instead of a product it has to operate.
What the work
is actually like.
Pre-scale, remote, and close enough to the evidence that what you conclude gets acted on.
The work is insider investigations, with real evidence and real consequences. What you conclude is read by counsel, boards and sometimes courts.
Remote-first. Clear objectives, no micromanagement, and ownership of the cases you take.
Examiners shape the product they use. The pipeline, the rules and the portal are built alongside the people running cases on them.
Small team, pre-scale. The decisions you make now become how this company works for everyone who arrives after you.
Who we are
looking for.
No formal postings. These are the shapes of person we would drop everything to talk to.
Endpoint and cloud forensics, timeline reconstruction, evidence handling. People who take a case from collection to a signed report.
Turning insider behavior into rules that fire accurately, and keeping the false ones out.
LLM pipelines, agentic triage, and the systems that let our examiners and AI work millions of events together.
Send us your CV.
Write to us directly and tell us what you have worked on. That is the whole process to begin with.