Skip to main content

Early Access

Doyensec banner - a gray background with orange highlights and text that says build with security.
Doyensec logo

Doyensec

23 employees
Fully Remote

Doyensec is an independent application security company working at the intersection of software development and offensive engineering, helping clients find vulnerabilities and mitigate risk with actionable fixes. Founded in 2017, self-funded, and 100% remote since day one, it stays deliberately narrow: application security only, on the company's stated principle of doing fewer things better.

Doyensec's Remote Policy

Doyensec has been fully remote since it was founded. The company's leadership states that they trust their people and they do not have to be immediately 100% reachable when working. As long as consultants provide updates and results when needed, it is perfectly fine to shutdown email and other communication channels.

As a firm that measures output, not input, and cares about results, asynchronous work is further supported by the mindset of avoiding unnecessary meetings and protocols.

From their careers page: "Doyensec is based in San Francisco, but we operate globally. You can work anywhere with a compatible timezone." Location terms are set per role, so check the individual job listing for the eligibility that applies to it.

Source: https://doyensec.com/careers.html

Benefits & Perks

Health & Wellness

2

Health Insurance

Health care is one of the perks Doyensec lists for its team.

Mental Health Benefits

Doyensec covers therapist sessions for its team.

Financial

1

Performance Bonus

Doyensec pays performance-based bonuses on top of base salary, and rewards research results separately.

Time Off

2

Flexible Schedule

Doyensec markets remote work with flexible hours and evaluates output rather than hours logged, so team members set their own working pattern.

PTO / Vacation

Doyensec's roles include paid time off. The company does not publish a specific number of days.

Remote & Equipment

3

Company Offsites / Retreats

Doyensec brings its fully remote team together for annual retreats and has a specific get-together budget for smaller in-person collaboration opportunities.

Coworking Allowance

Doyensec reimburses coworking space costs for team members who would rather not work from home.

Company Equipment

Doyensec assembles a welcome package and ships every device needed for the job to each new hire's location, wherever in the world they are based.

Professional Growth

4

Book Stipend

Team members can order unlimited technical books at company expense.

Learning & Development Budget

Doyensec pays for language classes for its team members across its distributed workforce.

Conference Attendance

Doyensec funds attendance at security conferences worldwide, and supports team members presenting their own research at conferences.

Mentorship Program

Interns at Doyensec are assigned a senior security researcher who mentors them for the full length of the internship.

Culture & Perks

1

Entrepreneurship Encouraged

Doyensec schedules 25% of every researcher's time for self-directed research: building security tools, discovering new attack techniques, and breaking the things they choose. Interns receive 50% of their time for application security R&D.

Tech Stack

JavaScript & Libraries

JavaScript
HTML5
Css3

Frameworks

Python
Java
C Sharp
Cpp
GraphQL
Electronjs

Infrastructure

AWS
Ubuntu
GitHub
Npm

Web Servers

Apache

Integrations

Burp Suite
Nmap
Electronegativity
Electrong
Inql
Burp Rest API
Pgp
Slack

Media

Google Hangouts
27 technologies detected

Why Doyensec

Research is not a side project at Doyensec, it is written into the business model. Every researcher gets 25% of their time for self-directed research, a commitment the company has stated publicly since 2017.

Day to day, the team runs on trust rather than presence. In the company's words, team members do not have to be immediately 100% reachable, and shutting off email and other channels while working is fine as long as updates and results arrive when needed. Most communication goes through PGP-encrypted email, with Mattermost, Signal, and video calls when an answer is needed quickly.

The synchronous rituals that do exist are specific: weekly meetings include a "best bugs" session where the team shares the most interesting findings of the week, two people on the same project pair up over screen sharing to read source code and hunt vulnerabilities together, and cross-training sessions have team members demo new tools and techniques. Doyensec is also unusually candid about the tradeoff, writing that work/life balance has been harder to maintain there, not easier, because its researchers are so motivated by the work.

Do you work at Doyensec?

Help others learn about the remote work culture. Your anonymous review helps job seekers make informed decisions.

We don't support Manatal yet

Remotivated doesn't currently integrate with Manatal. You can view their open positions directly on their careers page.

View Careers Page

Open Positions

No active positions at Doyensec right now

Check back soon or follow the company to get notified about new openings