// Work with us
Build the
future of AI
& Cybersecurity.
Tinlance is a small, intensely focused team. We hire rarely — but when we do, we hire exceptionally talented engineers who care about building things that actually work.
// Who we are
We build products at the frontier. Not demos. Not MVPs that fall apart. Real systems.
Our own product, ThreatFade, is validated against real Merlin QUIC C2 traffic — 490,000+ packets, z-score 14.76. We have merged contributions to Nuclei and Semgrep, two of the most widely used open source security tools in the world.
That is the standard we hold ourselves to. If you want to build things that security researchers and engineers actually use in production — this is the place.
We work with AI and cybersecurity startups globally — building LLM products, threat detection systems, security dashboards, and compliance tooling. The work is varied, technically deep, and always shipping.
We build to production standard
Not demos. If it ships, it needs to work under load, handle failures gracefully, and be maintainable. We code-review everything.
Open source is in our DNA
We have contributed to Nuclei and Semgrep. We believe in giving back and staying close to the tools the security community actually uses.
Small team, big ownership
You will not be ticket #4,217 in a sprint backlog. You will own entire features, make architecture decisions, and see your work live in days.
Remote-first, async-friendly
We are based in Nigeria but work globally. Time zones are not a problem if you can communicate clearly and ship reliably.
No deadweight overhead
No scrum ceremonies. No arbitrary standups. Just clear goals, weekly check-ins, and the space to do your best work.
// Open positions
We hire when we find
someone exceptional.
What we look for in every hire
// Our open source work
We ship in public too.
Nuclei
Fast, customisable vulnerability scanner. We have contributed merged templates to the community template library.
Semgrep
Static analysis tool for finding bugs and enforcing code standards. Our rules are merged and in active use.
ThreatFade
Our own evasion interception platform. Validated on real Merlin QUIC C2 traffic. In private beta now.
Think you belong here?
Send us your work — GitHub, live products, security research, anything that shows what you build.
Send your application →No recruitment agencies. Direct applications only.