Open Positions
Senior Security Researcher — Post-Quantum Cryptography
Lead research into post-quantum cryptographic implementations, CRQC threat modeling, and the 313-BIND temporal binding protocol. You will own the SLH-DSA/ML-DSA migration roadmap and contribute to NIST FIPS 203/204/205 compliance.
Requirements
- Deep expertise in post-quantum cryptography (lattice-based, hash-based)
- Experience with NIST PQC standards (FIPS 203/204/205)
- Python proficiency — able to contribute to shadow313/core/
- Understanding of CRQC threat timelines and HNDL attack vectors
- Familiarity with IPFS, cryptographic audit chains, or blockchain anchoring
Detection Engineer — ATT&CK Coverage
Expand Shadow313's ATT&CK coverage from 51.4% toward 80%+. Build new detectors for the 70 currently undetected techniques, focusing on Defense Evasion, Collection, and Exfiltration gaps.
Requirements
- MITRE ATT&CK expertise — able to map TTPs to detection logic
- Experience writing Sigma rules, YARA rules, or behavioral detectors
- Python — able to implement detector classes in shadow313/v4/detection/
- Understanding of EDR telemetry, eBPF, ETW, or Sysmon
- Familiarity with BYOVD, direct syscall evasion, or LOTL techniques
VSAT / Satellite Security Specialist
Expand the VSAT Tactical Security Suite with real-world satellite ground segment attack scenarios, RF analysis capabilities, and integration with the 313-BIND audit chain.
Requirements
- Experience with VSAT, satellite communications, or RF security
- Knowledge of TR-069 CWMP, DVB-S2, or Ku-band link budgets
- Familiarity with CVE-2026-3392 class vulnerabilities
- Python — able to contribute to shadow313/v4/aegis/
Why Shadow313?
🔬 Cutting-Edge Research
Work on genuinely novel problems — 313-BIND temporal binding, post-quantum migration, satellite security, and adversarial AI deception. No legacy codebase, no bureaucracy.
🌍 Remote-First
Work from anywhere. We are based in Ottawa, ON, Canada but collaborate globally. Async-first communication with flexible hours.
🔐 Real Impact
Your work protects real systems. Shadow313 is used by security researchers, penetration testers, and defense contractors who need post-quantum audit trails.
📖 Open Source
All core work is MIT-licensed and publicly visible. Build your reputation while contributing to the security community.