How We Vet

Screened on the platform, not the CV.

Every cyber and identity specialist we put forward has passed six stages, run by certified practitioners who have done the work themselves. About one in a hundred make it through.

01100%Brief & Sourcing
0242%Identity, Credentials & Right to Work
0318%Technical Assessment
049%Design Scenario Review
056%Practitioner Panel
061%References

Share of candidates still in the process at each stage.

The Six Stages

What every candidate goes through.

The same process for contract and permanent roles, in every country we work in. Nobody skips a stage, however strong the CV looks.

01

Brief & Sourcing

We start from your platform and the problem, not a job title.

We search for people who have done this exact work before. Anyone without hands-on experience on your platform stops here.

→Platform and version experience
→Scale of past environments
→Fit with your hours and location
02

Identity, Credentials & Right to Work

The basics, checked properly before anyone spends time on a technical interview.

We confirm who they are, that they can legally work where you need them, and that their certifications are real and current.

→Identity and right to work
→Certifications verified with the issuer
→Employment history
03

Technical Assessment

A hands-on exercise in a live sandbox on the platform you use.

Candidates build, configure and fix real things while a practitioner watches. We see how they work, not just what they say.

→Builds and configuration on the platform
→Finding and fixing a planted fault
→Clean, supportable work
04

Design Scenario Review

Real-world problems talked through with someone who has solved them.

We test judgement: how they would handle a messy rollout, a failed integration or an audit finding, and what they would trade off.

→Design choices and trade-offs
→How things fail, and recovery
→Explaining clearly to non-specialists
05

Practitioner Panel

A final interview led by a CISSP-certified practitioner.

The panel decides whether we would put this person on our own programme. If the answer is not a clear yes, we do not put them forward.

→Depth across the wider security picture
→Working with your team and change process
→Clear yes or no
06

References

Three references from people who managed or worked alongside them.

We ask about the same platform work we tested, so references confirm what we saw rather than repeat the CV.

→Three reference checks
→Same platform, similar scale
→Reliability and delivery
What We Test

Tested on the work you need done.

The technical assessment is built around the platform and problem in your brief. These are the areas we assess most often.

Identity
Identity Governance Connecting systems, joiner-mover-leaver rules, access reviews and role design. SailPoint, Saviynt
Access Management & Single Sign-On Sign-in flows, multi-factor rules, lifecycle automation and app integrations. Okta, Microsoft Entra ID, Ping
Privileged Access Vaulting admin accounts, session controls and just-in-time access. CyberArk, BeyondTrust, Delinea
Customer Identity Sign-up and login at scale, social login, consent and fraud controls. Auth0, Okta Customer Identity
Cyber Engineering
Email Security Mail filtering policy, phishing protection and investigating real messages. Proofpoint, Mimecast
Secure Web & Cloud Access Web filtering, private app access and data loss rules. Netskope, Zscaler
Edge & Network Firewall, web application protection and network segmentation. Cloudflare, Palo Alto, Fortinet
Cloud Security Secure landing zones, posture management and fixing misconfigurations. AWS, Azure, Google Cloud
Who Does the Vetting

Practitioners, not recruiters.

Every assessment and panel is run by our own CISSP-certified practitioners. They have built identity and cyber programmes in production, so they know what good looks like in a live environment and spot gaps a keyword search never would.

Each candidate is assessed by someone who has worked on the same platform. If we do not have that depth in-house for a niche tool, we bring in a trusted specialist to run the technical stage with us.

CISSP-Certified Screening · ISC²
With Every Shortlist

What you receive.

Each candidate comes with the evidence behind our recommendation, so your own interviews can focus on fit.

01Assessment NotesWhat they built in the sandbox, where they were strong and anything to watch.
02Practitioner RecommendationA plain-English view from the practitioner who interviewed them.
03Verified ChecksIdentity, right to work, certifications and three references, all confirmed.
04Availability & RateStart date, working hours and rate, agreed up front so there are no surprises.

Put a proven identity or cyber engineering specialist on your team.

Tell us the platform and the problem. You'll speak to a practitioner, not a recruiter, and see a vetted shortlist within days.