A high bar
CISSP, GIAC and OffSec level.
Paid well
Good work, well paid.
Training paid for
SANS courses and certifications.
Your success
What we want for everyone.
The standard
Both sides of the table
We understand what the business needs, and we do the hands-on work ourselves.
Business and risk
Risk, governance and cloud strategy.
- ISC2: Designs, builds and runs a whole security programme.
- ISACA: Runs security governance, risk and incident management.
- ISC2: Designs and secures data and systems in the cloud.
- ISC2: Hands-on skill keeping systems secure day to day.
Our team holds both
30
certifications held across our team
Counted per person, so the 7 held by more than one of us count once for each holder. 21 different in all.
Technical
Testing, incident response, forensics, cloud and logging.
Offence and defence
- GIAC: Tests web applications for weaknesses an attacker could use.
- OffSec: Finds and exploits weaknesses, then escalates, in a hands-on exam.
- GIAC: Detects, responds to and resolves security incidents.
- GIAC: Collects and analyses evidence from Windows computers.
- GIAC: Analyses evidence in complex investigations.
- GIAC: Runs incident response across a large organisation.
- Security Blue Team: Investigates attacks in a hands-on practical exam.
Cloud and platforms
- AWS: Secures data and workloads on AWS.
- AWS: Designs complex systems across many AWS accounts.
- AWS: Designs secure, resilient systems on AWS.
- Microsoft: Secures identity, networks and data on Azure.
- GitHub: Finds vulnerable code, dependencies and leaked secrets.
- Trend Micro: Deploys and runs Deep Security workload protection.
Splunk and logging
- Splunk: Deploys, manages and troubleshoots complex Splunk environments.
- Splunk: Runs a Splunk Enterprise environment and keeps it healthy.
- Splunk: Builds complex searches, reports and dashboards.
- Splunk: Searches, reports on and shapes data in Splunk.
What we'd love you to add
Any certification that shows your drive. SANS and GIAC are very welcome, or whatever pushes you on.
We pay for the training.
Badges belong to their issuers. They name each certification and suggest no endorsement.
Why certifications matter to us
Some say certifications are pointless. We disagree.
The right ones are hard to earn, and that is exactly why we value them.
Effort beyond the day job
Passing takes real study and shows the work you put in.
Staying current
Security moves fast; certifications keep you learning.
A shared baseline
What good looks like, and more than one route there.
Proof, not paperwork
You can't pass without knowing what you're doing.
Hard to earn, hard to keep
From the issuers' own published rules.
23 hours 45 minutes
OSCP+ exam
Proctored and hands-on, then 24 hours to write the report.
SourceOffSec, OSCP+ Exam Guide (opens in a new tab)Updated 21 Oct 2026
5 years
CISSP experience
Five years of cumulative, full-time experience in two or more of its eight domains (part-time work counts pro rata; a relevant degree or approved credential can cover up to one year), then 120 CPE credits every three years.
SourceISC2, CISSP Experience Requirements: Work Experience Guide (opens in a new tab)ISC2, One Constant: The CISSP Standard (opens in a new tab)Read 23 Oct 2026
36 credits
GIAC renewal
Renew every four years: 36 credits or a retake.
SourceGIAC, Renewing Your GIAC Certification (opens in a new tab)Read 23 Oct 2026
What the research says
Survey by Fortinet
91%
Nine in ten IT decision-makers prefer to hire certified candidates
91 in every 100 decision-makers surveyed
89% and 91% in the two previous surveys
SourceFortinet, 2026 Cybersecurity Skills Gap Global Research Report (opens in a new tab)Survey of 2,750 IT and/or Cyber Security decision-makers in 32 countries and locations, Dec 2025
Survey by FortinetSelf-reported
55%
More than half say certification helps people do the job better
SourceFortinet, 2025 Cybersecurity Skills Gap Global Research Report (opens in a new tab)Survey of 1,850 IT and Cyber Security decision-makers in 29 countries and locations, Feb 2025
Survey by the World Economic ForumWhy staying current matters
61%
Keeping up with change is the challenge named most often
SourceWEF, Global Cybersecurity Outlook 2026 (opens in a new tab)Survey of 804 respondents in 92 countries, Aug to Oct 2025
A UK view
Employers and recruiters interviewed for the UK government's skills study generally thought qualifications such as CISSP can give a candidate a more favourable weighting, alongside real experience.
Source DSIT, Cyber security skills in the UK labour market 2024 (opens in a new tab)
Read the research
- 91%
of IT and/or Cyber Security decision-makers say they prefer to hire candidates with technology-focused certifications. Of those, 67% say they look for certifications because they validate Cyber Security awareness and knowledge.
Fortinet, 2026 Cybersecurity Skills Gap Global Research Report (opens in a new tab)
- 55%
of respondents cite the ability to better perform job tasks as an advantage of certifications, for themselves and for others, and 61% report increased Cyber Security skills and knowledge. These are respondents’ own reports, not a measured comparison.
Fortinet, 2025 Cybersecurity Skills Gap Global Research Report (opens in a new tab)
- 61%
of respondents named the rapidly evolving threat landscape and emerging technologies as one of their organisation’s greatest challenges to cyber resilience, ahead of third-party and supply chain vulnerabilities (46%) and cyber skills and expertise shortages (45%).
Fortinet runs its own certification programme, though not the CISSP, GIAC or OffSec certifications on this page. The World Economic Forum figure is about change in the field, not certifications. All three are what respondents report, not measured results.
Who we look for
Driven, motivated, hard-working
Three things we look for in everyone we hire.
Not there yet on certifications? Tell us what you're working towards.
In return
You bring the drive. We back it.
We want everyone here to succeed, so we pay for the training that gets you there. We do it because we care.
What would you ask for?
Ask for the course or certification you need, and we pay for it.
Apply
Send us three things
It opens in your own email. Nothing is sent until you press send.
Attached to the email.
And any you're working towards.
On what drives you.
No need for a photo or your date of birth.
Tell us if you need any adjustments to apply.
An example application email: a CV attached, the certifications held and being worked towards, and a line on what drives the sender.