Careers
A career at DeshCyber means building compliance evidence that is dated, versioned and reproducible — software and control research held to the same standard as an external assessment.
We hire people who write before they build, who name their assumptions, and who are comfortable being audited on their own output. Open roles are listed on the roles page; this page states what we are and what we look for.
The two statements every role here is measured against.
Vision
A regulated organization should be able to prove its compliance position on any given day, without running a project to do it.
Mission
We build the platform and the control research that turn live system activity into verdicts an assessor can recompute independently.
Six qualities we test for in every discipline, from platform engineering to assurance review.
Can state a problem, the constraints and the chosen trade-off in a page that someone else can act on without a meeting.
Where it shows up
Design notes, rule specifications, engagement briefs.
Reaches for the artefact, the log line or the regulatory text rather than an opinion about what is probably true.
Where it shows up
Control research, incident review.
Knows the difference between what a control claims, what it covers and what it leaves open — and says so plainly.
Where it shows up
Framework coverage, assessor conversations.
Comfortable in TypeScript and data pipelines, and able to reason about correctness, determinism and failure modes.
Where it shows up
Platform, collectors, console.
Can read SEC, DFARS, PCI or SWIFT source material and turn it into something testable, or is set on learning to.
Where it shows up
Rule research, assurance review.
Takes a surface end to end and stays accountable for it after it ships, including the parts that are unglamorous.
Where it shows up
Every function, from day one.
The practical facts, stated before you apply.
The exercise is scoped to a few hours and is close to real work; we pay for anything longer.
Overlap hours are agreed per team rather than imposed globally.
Written artefacts are produced in English; day-to-day work happens in both.
Levels and their criteria are written down before anyone is measured against them.
Assurance never reports to the team whose output it reviews.
If nothing listed fits, send the problem you want to work on and why it matters.
The principles, people and engagement model behind the structure above.
Tell us what you have built and which mandate you know best; we reply within one business day.