Find the latest Webinar content from the Sprocket Testing Team.
Settings icon Careers

Careers at Sprocket

Want to work with brilliant minds changing the way companies do penetration testing? Sprocket Security is hiring.

The Sprocket team
What Drives Us
What makes Working at Sprocket great

Innovating the cybersecurity space, and having a good time while we do.

Calendar icon Unlimited Paid Time Off

We encourage our employees to maintain a healthy work/life balance and take PTO throughout the year when best for them.

Coffee icon Flexible & Remote Working Hours

Work remotely on whatever schedule suits you. We measure performance on results, not seat time. Join us anywhere!

Dollar Sign icon Competitive 401k & Insurance

Matched 401k on hire. Contributing 75% to health insurance for employees (and 50% for dependents) and 100% to dental and vision.

Smile icon And so much more!

Equipment of your choosing, paid events, conferences, contributions to continual learning and much more!

Life at Sprocket

At Sprocket Security, our people are our greatest strength. In this video, you’ll hear directly from team members about what it’s like to work here, how their goals are supported, what daily life looks like, and why they choose to grow with us. You’ll also hear from our CEO and Founder, Casey Cammilleri, on Sprocket’s mission, and from our COO, Guarav Kulkarni, on what it truly means to be part of the Sprocket team.

Open Positions


Sprocket Blog

Explore Latest Resources.

 / 
  • 14 min read
  • Upload69fdfe45aec857.46770806 Auditing AI Chat APIs: Beyond Prompt Injection

    Prompt injection isn't the only risk in AI chat APIs. See how we found a GraphQL BOLA in…

     / 
  • 6 min read
  • Ahead of the Breach - Gary Lobermier, Lead Adversarial Security Engineer at Northwestern Mutual

    Gary Lobermier of Northwestern Mutual on building purple team automation that validates…

     / 
  • 16 min read
  • Self-Propagating XSS: When Widget Frameworks Become Worm Vectors in Multi-Tenant Platforms

    Discover how a self-propagating XSS worm exploits multi-tenant widget frameworks to…

     / 
  • 15 min read
  • Hook, Line, and Server

    MFA doesn't stop session cookie replay. Endpoint detection doesn't catch fileless malware…