SAFA is a premier offensive security company, providing vulnerability research and consulting services on the European market. We are striving to maintain balanced teams of seasoned veterans, established professionals and upcoming talents to tackle difficult technical challenges in a collaborative manner. From mobile and desktop OS kernels to IoT devices, we conduct deep technical investigations on a variety of interesting targets.
We offer:
Website: https://safateam.com/
Catalyst Security is a growing team of highly experienced vulnerability researchers, focused on solving the most challenging problems in support of our customers.
We offer highly competitive compensation, a supportive and fun work environment, and the chance to work with an exceptionally skilled world-class team of researchers. We are primarily based out of the FVEY, but are hiring worldwide and offer flexible, remote work.
We are particularly interested in iOS, Android, Browser and 0-click researchers.
Website: https://catalystsecurity.com/
Cellebrite is a global leader in the Digital Intelligence domain, empowering law enforcement forensic labs worldwide in their pursuit of bringing justice to light, convicting the guilty, and acquitting the innocent.
Cellebrite Labs is a global talent team of experts passionate about spearheading research in the areas of forensic extraction, device unlocking and decryption.
Empowered by years of accumulated knowledge and tools, the team is constantly innovating, and applying modern vulnerability research and exploitation techniques to increasingly challenging device security and data protection measures.
Cellebrite Labs’ research is strictly focused on local (physical access) vectors, privilege escalations, secure enclaves, trust zones and all the fun that goes with this.
Website: https://cellebrite.com
Paradigm Shift Technology is a leading European cybersecurity research provider, founded and led by industry veterans and elite researchers with over a decade of expertise across offensive and defensive security.
We specialize in discovering and exploiting zero-day vulnerabilities across complex technologies, delivering advanced research solutions tailored to each partner’s mission.
Our work empowers defence, law enforcement, and trusted partners to protect, innovate, and stay ahead in the critical cyber domain.
Website: https://ps.tc/
Magnet Forensics is re-imagining digital investigations with an integrated approach that maximizes people, processes, and thechnology - providing a wide range of solutions for law enforcement agencies, including the industry-leading Magnet Graykey, to meet modern challenges.
Website: https://www.magnetforensics.com/
CYONYX is a cyber capabilities business unit within L3Harris Technologies focused on advanced vulnerability research and the development of mission-enabling cyber tools.
CYONYX works at the forefront of offensive cyber capability development. Our teams discover previously unknown vulnerabilities in widely used software and engineer them into working capabilities that government customers can deploy against the most sophisticated adversaries. We are a high-performing team of network operators, engineers and vulnerability researchers driven by intellectual curiosity, collaboration and a commitment to technical excellence. Our workforce is primarily remote, supported by hubs across the Five Eyes nations, and built around people who take their craft seriously.
Our researchers are globally distributed and deeply engaged in the broader security community, contributing to public security research, competing in competitions and weighing in on artificial intelligence and the evolving offensive cyber landscape.
Website: https://www.l3harris.com/cyonyx
La Direction Générale de la Sécurité Extérieure est le service secret français. Reconnue pour son excellence technologique et son innovation, elle contribue à la souveraineté de notre pays.
Rattachée au ministère des Armées, sa mission consiste à recueillir des renseignements partout dans le monde afin d'éclairer les plus hautes autorités de l'État, et à détecter et entraver les menaces de toute nature dirigées contre les intérêts de la Nation.
Website: https://www.dgse.gouv.fr
La Direction Générale de la Sécurité Intérieure (DGSI) est le service de renseignement chargé de protéger les intérêts fondamentaux de la nation. Elle a quatre missions principales sur l’ensemble du territoire national : le contre-terrorisme, la contre ingérence économique, la cyberdéfense et le contre-espionnage, compétence exclusive du service.
Pour agir, la DGSI compte sur environ 5000 agents, aux profils variés et avec plus de 150 métiers différents, face à une menace évolutive.
Renseignez-vous, rejoignez-nous sur notre site web
Website: https://www.dgsi.interieur.gouv.fr/
Interrupt Labs is a leading vulnerability research company working on some of the toughest challenges in the industry; from popping browsers to exploiting phones and cars, we cover it all with our exceptional team of vulnerability researchers.
We are always on the lookout for talented people and are always keen to talk research.
To follow our latest research and job openings on X: @InterruptLabs.
Website: https://interruptlabs.co.uk
TrendAI's Zero Day Initiative (ZDI) was created to encourage the reporting of 0-day vulnerabilities privately to the affected vendors by financially rewarding researchers.
TrendAI ZDI pioneered the vulnerability marketplace with a focus on disrupting attackers by legitimately purchasing vulnerability research that can then be disclosed to affected vendors.
Vulnerabilities are taken off the market for possible abusers and affected vendors are able to address the vulnerabilities before the information is made public. TrendAI ZDI uses incentivized coordinated disclosure to affected vendors to prevent blind-sided attacks on corporate environments.
Website: https://www.trendaisecurity.com/
Aesir is an innovative boutique cyber brand dedicated to precision-focused offensive cyber capabilities. Leveraging a team composed of elite experts from military, intelligence, and specialized technical fields, Aesir provides tailored cyber-espionage, vulnerability research, and red-team services to select government and private-sector clients.
Committed to discretion and ethical rigor, Aesir's forward-thinking approach blends strategic insight with advanced technologies, positioning it at the forefront of modern cyber operations.
eShard develops advanced technologies for software security investigation. Our esReverse platform helps security researchers tackle complex software and malware investigations, combining advanced reverse-engineering capabilities with AI-assisted analysis.
With Epoch, analysts and AI agents can investigate deterministic execution evidence to understand what malware actually did, trace suspicious behaviour back to its causes, and explore runtime behaviour when conventional reverse-engineering and debugging workflows reach their limits.
Website: https://www.eshard.com/
Founded in 2015 by experts in information system security, RandoriSec is a human-sized service company that provides services adapted to the unique contexts of its customers. It relies on the know-how of its consultants who have been accompanying their customers for 15 years in the control of risks associated with the use of digital technologies.
RandoriSec provides expertise on the following areas:
Website: https://www.randorisec.fr
Trail of Bits helps secure the world’s most targeted organizations and products by combining security research with an attacker mentality to reduce risk and fortify code.
Website: https://trailofbits.com/
Binary Gecko GmbH is a niche provider of comprehensive and specialized cybersecurity solutions.
We offer a range of services, including defensive products designed to protect our clients from cyber threats as well as our own specialized Vulnerability Research Division: "Binary Gecko Labs".
In our Lab, we focus on the most challenging and groundbreaking research, from browsers to operating systems to IoT. We are willing to undertake every challenge.
We are always open to hiring vulnerability researchers from all over the globe, Seniors and Juniors, we believe in building together a passionate team that works together in a flexible environment. If you feel that you are for it then DM us at @Binary_Gecko or through our website binarygecko.com!
Website: https://binarygecko.com/
Synacktiv aims to help companies evaluate and improve the security level of their information system. The company was founded in 2012 by two IT security experts. They have been working to make Synacktiv the French reference in offensive security ever since.
Website: https://www.synacktiv.com