Join a team that proves its work.
TrekShield is a human-led penetration testing company based in Hyderabad. We exploit what we find, back it with steps anyone can reproduce, and support each finding through remediation and retest. If that is how you like to work, we would like to hear from you.
The standard every engagement is held to.
These are not posters on a wall. They decide what leaves the building with our name on it.
Prove it, or it doesn’t ship.
Every exploitable finding goes out with a proof-of-exploit and reproduction steps a developer can follow. If it can’t be reproduced, it isn’t reported.
A second pair of eyes.
Every finding passes a QA review before a client sees it. Your work gets read closely, and you’ll read other people’s work just as closely.
Hands on the keyboard.
Testers exploit by hand, chaining authentication, access-control and business-logic flaws that automated tools tend to miss.
See it through.
Retests are requested and tracked in the platform. You don’t throw findings over the wall.
Far more than web apps.
Depending on your specialty, your engagements could include:
Application & API
Web applications, APIs, mobile apps, thick clients and secure code review.
Cloud & containers
Cloud environments, Kubernetes and containers.
Network & infrastructure
External and internal networks, Active Directory and wireless.
Red & purple team
Adversary emulation, and working alongside defenders to test detection.
Human & physical
Social engineering and physical access testing.
AI & LLM
LLM applications, AI red teaming, AI agent security and AI risk assessment.
Hardware, IoT & OT
Embedded devices, firmware, IoT, OT/ICS and automotive systems.
Every service we offer
The full list of what we test, in one place.
Where you would fit on an engagement.
Every engagement runs on the TrekShield platform, with defined roles from scoping to retest.
-
Engagement Manager
Runs the engagement from scope to delivery, schedules retests and publishes the report.
-
Pentester
Tests, exploits and documents each finding with evidence, reproduction steps and remediation guidance.
-
QA Reviewer
Checks each finding and report for accuracy, severity and reproducibility before release.
-
Retest
Once the client ships a fix, a tester verifies it and the finding is closed or reopened.
Findings, remediation, retests and reports all live in one platform, so the full history of every finding is in one place.
Open roles.
No roles are listed right now.
We still want to hear from strong testers. Send a short note with your specialty, links to work you are proud of (write-ups, CVEs, talks, tools or credentials) and your CV.
Please email us rather than using the contact form: that form goes to our sales team, not to hiring.
Where we work.
TrekShield is based in Hyderabad, India.
See how we work before you apply.
The bench
Meet some of our testers and the credentials they hold individually, including OSCP, OSWE, OSEP and CRTO.
Our methodology
The six phases every engagement follows, from scope to retest.
Technical write-ups
BOLA vs BFLA, the business-logic flaws scanners miss, and IDOR in multi-tenant SaaS.
What a good report contains
The standard our reports are written to.
Questions from candidates.
What does the day-to-day work involve?
Scoping calls, hands-on exploitation, writing up findings with evidence and reproduction steps, responding to QA review, and retesting fixes, all tracked in the TrekShield platform.
How do I apply?
Email hello@trekshield.com with a subject line that starts with “Careers:”, a short note on your specialty, links to work you’re proud of and your CV. Please don’t use the contact form on this site: it goes to our sales team, not to hiring.
No open role fits me. Should I still apply?
Yes. Send a speculative application with your specialty and examples of your work, such as write-ups, CVEs, talks or tools.
Something we have not covered? Email us with a subject line that starts with “Careers:”.
hello@trekshield.comThink you’d fit? Show us your work.
Pick an open role, or tell us what you do best.