Careers

Senior practitioners,
building SleuthX.

SleuthX is the consulting practice and the AI agent. Senior-only, principal-reviewed, and built to hold up in court. If that is the work you want to do, the door is open.

Email Quinn directly Call (239) 241-8095

How we staff

Three principles, no exceptions.

Senior-only bench

No tier-1 ticket factory, no offshore phones, no junior staff fronting senior work. Every practitioner has earned the credentials and the case-hours that make the work defensible. We staff for that, not for billable-hour multipliers.

Court-admissible standard

Methodology is built around FRE 901, FRCP 26, chain of custody, and Daubert qualification. The work has to hold up in deposition before it ever holds up on a Slack message.

AI-augmented, principal-reviewed

SleuthX, our AI agent, scales the procedural work that used to consume senior-analyst hours. Practitioners review and attest every output. The medical-imaging-AI pattern: AI does the first read, the credentialed practitioner does the final read.

Open tracks

Roles we are looking to fill.

We hire selectively, not opportunistically. If your background fits the practice but not a listed role, send a note anyway and make the case for the role you would create.

Senior Digital Forensics Examiner

Remote (US) or Naples, FL · Full-time

Apply

Lead court-admissible forensic engagements end-to-end: phone and computer extraction with industry-standard tooling (in-house and through our partner network), cloud forensics, deleted-data recovery, and chain-of-custody-aligned reporting for litigation and law-enforcement matters.

Must have

GCFE, GCFA, EnCE, or equivalent forensic credential
5+ years working forensic case load
Court-room experience or willingness to qualify as expert witness

AI / ML Engineer (SleuthX)

Remote (US) · Full-time, equity-eligible

Apply

Build the agentic pipeline behind SleuthX: LLM orchestration, tool-use agents, evaluation harness, hallucination guardrails, and the practitioner-review interface. Work alongside senior forensic examiners to translate their procedures into evaluable AI behavior.

Must have

Production experience with agentic frameworks (Claude SDK, LangGraph, or similar)
Strong evaluation and observability instincts
Comfort working in regulated, high-consequence domains

Senior Incident Response Lead

Remote (US), 24/7 rotation · Full-time

Apply

Run active-incident engagements: ransomware response, BEC investigation, cloud-account compromise, data-breach scoping, and breach-counsel coordination. Coordinate with the Varcoe enterprise practice on B2B retainers.

Must have

GCIH, GCFA, or equivalent IR credential
5+ years of hands-on incident response
Comfort working under attorney-client privilege

OSINT and Threat Intelligence Analyst

Remote (US) · Full-time or contract

Apply

Deliver OSINT investigations across romance-scam attribution, identity-theft tracing, executive-threat intelligence, due diligence, and corporate adversary research. Map digital exposure for HNW principals and family offices.

Must have

3+ years of OSINT or threat-intel work
Maltego, SpiderFoot, or equivalent tooling fluency
Strong written reporting voice

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 9 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response

View Full Bio Connect on LinkedIn

Frequently asked about working here

Are you actively hiring?

We hire selectively, not opportunistically. The roles listed above are the standing tracks where a strong candidate would meaningfully extend the bench. If your background fits one of them, send a note. If your background fits the practice but not a listed role, send a note anyway and explain the case for the role you would create.

Why is the bench senior-only?

Because the work is. Court-admissible forensic methodology, AI-agent oversight in a regulated domain, and high-consequence incident response do not survive a junior-led delivery model. We would rather grow slowly with senior practitioners than scale the headcount-leverage pyramid that creates the very work-quality problems we built the practice to solve.

What is the engagement model? Employee, contractor, or fractional?

All three are open depending on the role. Senior forensic examiners and AI engineers tend to run as employees with equity participation. IR leads and OSINT analysts often start as contract or fractional and convert to employee when the case load justifies it. The legal entity for employment and contracting is SleuthX, Inc. (Delaware C-corporation).

Equity?

SleuthX has an option pool reserved for early hires. Equity is real (Delaware C-corp, ISO grants, four-year vest, one-year cliff) and is offered on top of cash compensation, not in place of it. Cash bands sit at or above the senior-practitioner market rate for each role.

Where is the work done?

Most roles are remote within the United States. Some forensic-examination work has to happen on-site for chain of custody on physical media. Quinn is based in Naples, Florida. We do not hire outside the United States at this time because of ITAR, federal, and chain-of-custody constraints on a portion of the case load.

What is the interview process?

First conversation is a 30-minute call with Quinn directly. NDA-protected. If both sides want to continue, the second step is a paid trial engagement on a real (anonymized) case sample, scoped to about 10 hours. We pay for the trial whether or not we extend an offer. The third step is a closing conversation to align on cash, equity, and start date. We do not run a multi-week panel-loop process.

How do I apply?

Email Quinn directly at quinn@sleuthx.ai. Subject line: the role title. Include a CV or LinkedIn URL, a one-paragraph case for fit, and a sample of your work that we are allowed to read (a published report, a redacted forensic write-up, a blog post, a conference talk, a GitHub repo). No cover letter required.

Quinnlan Varcoe

GIAC-certified · Founder & CEO

Schedule Your Session

Ready to make a case for fit?

Email Quinn directly. Subject line: the role title. CV or LinkedIn, one-paragraph fit pitch, and a sample of your work we are allowed to read. No cover letter required.

Schedule Consultation (239) 241-8095 Send a message

Free, confidential · NDA-protected · no obligation.

1. Book a 30-minute call — we scope your situation, no charge.
2. You get a written scope — deliverables, timeline, and price — before any work begins.
3. Approve it and we start; most engagements begin within 48 hours.