

Doyensec
Doyensec is an independent application security company working at the intersection of software development and offensive engineering, helping clients find vulnerabilities and mitigate risk with actionable fixes. Founded in 2017, self-funded, and 100% remote since day one, it stays deliberately narrow: application security only, on the company's stated principle of doing fewer things better.
Doyensec's Remote Policy
Doyensec has been fully remote since it was founded. The company's leadership states that they trust their people and they do not have to be immediately 100% reachable when working. As long as consultants provide updates and results when needed, it is perfectly fine to shutdown email and other communication channels.
As a firm that measures output, not input, and cares about results, asynchronous work is further supported by the mindset of avoiding unnecessary meetings and protocols.
From their careers page: "Doyensec is based in San Francisco, but we operate globally. You can work anywhere with a compatible timezone." Location terms are set per role, so check the individual job listing for the eligibility that applies to it.
Source: https://doyensec.com/careers.html
Benefits & Perks
Health & Wellness
2
Health & Wellness
Health Insurance
Mental Health Benefits
Financial
1
Financial
Performance Bonus
Time Off
2
Time Off
Flexible Schedule
PTO / Vacation
Remote & Equipment
3
Remote & Equipment
Company Offsites / Retreats
Coworking Allowance
Company Equipment
Professional Growth
4
Professional Growth
Book Stipend
Learning & Development Budget
Conference Attendance
Mentorship Program
Culture & Perks
1
Culture & Perks
Entrepreneurship Encouraged
Tech Stack
JavaScript & Libraries
Frameworks
Infrastructure
Web Servers
Integrations
Media
Why Doyensec
Research is not a side project at Doyensec, it is written into the business model. Every researcher gets 25% of their time for self-directed research, a commitment the company has stated publicly since 2017.
Day to day, the team runs on trust rather than presence. In the company's words, team members do not have to be immediately 100% reachable, and shutting off email and other channels while working is fine as long as updates and results arrive when needed. Most communication goes through PGP-encrypted email, with Mattermost, Signal, and video calls when an answer is needed quickly.
The synchronous rituals that do exist are specific: weekly meetings include a "best bugs" session where the team shares the most interesting findings of the week, two people on the same project pair up over screen sharing to read source code and hunt vulnerabilities together, and cross-training sessions have team members demo new tools and techniques. Doyensec is also unusually candid about the tradeoff, writing that work/life balance has been harder to maintain there, not easier, because its researchers are so motivated by the work.
Do you work at Doyensec?
Help others learn about the remote work culture. Your anonymous review helps job seekers make informed decisions.
We don't support Manatal yet
Remotivated doesn't currently integrate with Manatal. You can view their open positions directly on their careers page.
View Careers PageOpen Positions
No active positions at Doyensec right now
Best remote job lists
- •Remote Jobs at Remote-First Companies
- •Remote Software Jobs: 25 Verified Opportunities at Top Companies
- •Remote Jobs with Unlimited PTO
- •Remote AI/ML Jobs
- •Remote Engineering Jobs
- •Remote FinTech Jobs: 25 Verified Opportunities at Top Companies
Best remote companies lists
- •Remote Companies With the Best Maternity Leave
- •Remote Companies With the Best Parental Leave
- •Remote Companies With Home Office Stipends
- •Remote Companies With Verified Equity Compensation
- •Remote-First Tech Companies
- •Remote Companies With Verified Mental Health Benefits