Careers
Witness is the consulting practice and the AI agent. Senior-only, principal-reviewed, and built to hold up in court. If that is the work you want to do, the door is open.
How we staff
No tier-1 ticket factory, no offshore phones, no junior staff fronting senior work. Every practitioner has earned the credentials and the case-hours that make the work defensible. We staff for that, not for billable-hour multipliers.
Methodology is built around FRE 901, FRCP 26, chain of custody, and Daubert qualification. The work has to hold up in deposition before it ever holds up on a Slack message.
Witness, our AI agent, scales the procedural work that used to consume senior-analyst hours. Practitioners review and attest every output. The medical-imaging-AI pattern: AI does the first read, the credentialed practitioner does the final read.
Open tracks
We hire selectively, not opportunistically. If your background fits the practice but not a listed role, send a note anyway and make the case for the role you would create.
Remote (US) or Naples, FL · Full-time
Lead court-admissible forensic engagements end-to-end: phone and computer extraction (Cellebrite, Magnet Axiom, Belkasoft), cloud forensics, deleted-data recovery, and chain-of-custody-aligned reporting for litigation and law-enforcement matters.
Must have
Remote (US) · Full-time, equity-eligible
Build the agentic pipeline behind Witness: LLM orchestration, tool-use agents, evaluation harness, hallucination guardrails, and the practitioner-review interface. Work alongside senior forensic examiners to translate their procedures into evaluable AI behavior.
Must have
Remote (US), 24/7 rotation · Full-time
Run active-incident engagements: ransomware response, BEC investigation, cloud-account compromise, data-breach scoping, and breach-counsel coordination. Coordinate with the Varcoe enterprise practice on B2B retainers.
Must have
Remote (US) · Full-time or contract
Deliver OSINT investigations across romance-scam attribution, identity-theft tracing, executive-threat intelligence, due diligence, and corporate adversary research. Map digital exposure for HNW principals and family offices.
Must have
Meet Your Practitioner
Founder & CEO
With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded Witness in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.
“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”
Meet Your Lead
Most Requested Services
Certified Expertise
GIAC · AWS · Splunk · CompTIA
Schedule Your Session
Email Quinn directly. Subject line: the role title. CV or LinkedIn, one-paragraph fit pitch, and a sample of your work we are allowed to read. No cover letter required.
Trusted by partners across the practice
