Do real security and compliance work, on your terms
A bench of independent practitioners who take scoped pieces of TrazTech client work: readiness, testing, cloud, privacy, AI governance and more.
Independent contractors · No exclusivity · Remote
Real client demand, growing fast
Canadian companies bring us their SOC 2, ISO 27001, penetration testing and security programs. Here's what our pipeline shows right now.
Share of open engagements that involve each practice
From our CRM, refreshed daily. Open means proposals out, on hold, signed or in delivery. The yearly figure is the pace of the last 90 days of proposals, rounded to the nearest million. One engagement can involve several practices.
What we promise associates
We're a small firm, so we compete on how we treat people. These aren't aspirations; the portal enforces them.
Paid on our clock
We pay 15 days after we accept your invoice, whether or not the client has paid us yet. The client's payment is our risk, not yours.
Feedback after every job
Scores for quality, communication and timeliness, one thing to keep doing and one to improve. No silent rankings.
A path you can see
Associate, Senior Associate, Lead, then the core team. The criteria are published, and you can see where you stand.
Judged on real work
A realistic client engagement, not a CV screen. A person reviews borderline results, and you get one human review if you don't pass.
Scope and fee up front
You see the scope, milestones and fee before you say yes. Declining never counts against you.
No racing for work
Quick paid tasks go round the practice in turn. Nobody has to sit refreshing a page or run a bot.
Never alone on a deliverable
A TrazTech Principal reviews and signs off everything before the client sees it, with Leads in your practice to help.
A credential that's real
Earned on an assessment, with a public verify page you can put on LinkedIn and your CV.
Three steps from application to work
No CV screen. You show us how you work on a realistic engagement, then we talk.
Apply
Five minutes. Tell us about your practice, your experience and your rough availability.
Take a realistic assessment
A simulated client engagement for a fictional company. About 3 hours of work, with 72 hours to submit.
Take scoped work orders
After a short call and setup, we offer you work that fits your practice. You accept or decline each one.
Where associates work
Pick the practices you're strongest in. Each has its own assessment track.
Compliance Readiness
SOC 2 Readiness, ISO 27001 Readiness, HIPAA Readiness, PCI DSS Readiness, and more
Offensive Security
Compliance Penetration Testing, Vulnerability Assessment, AI Penetration Testing, LLM Red Teaming, and more
Cloud & Infrastructure
Cloud Security Assessment, AWS Security Review, Vulnerability Management, Attack Surface Management, and more
Security Leadership
CISO as a Service, Interim CISO, vCISO Flexible, Security & Compliance Retainer, and more
Privacy
Outsourced Privacy Officer, PIPEDA Readiness, Quebec Law 25 Readiness Sprint, GDPR Readiness
AI Governance & Security
AI Governance, AI Acceptable Use Policy, AI Security Assessment, AI Vendor Risk Assessment, and more
Audit & Assurance
ISO 27001 Internal Audit
Support roles
Engagement Coordinator, Report QA & Technical Writing
How engagements run
What the work looks like
- Fixed scope. Clear milestones and deliverables. You see the scope before you accept.
- Paid per milestone, 15 days after we accept your invoice, whether or not the client has paid us yet.
- Our Workspace and SOPs. QA checklists, and a TrazTech Principal signs off every deliverable.
- No exclusivity. You set your availability and keep your other work.
- A credential you can use. Accepted associates get a verified TrazTech Associate credential with a public verify page. Put it on LinkedIn and your CV.
What we ask
- At least 3 years of relevant experience, 5 or more hours a week, and employment that allows side work (or none).
- An assessment of about 3 hours, in the practice you apply for.
- A 30-minute call if you pass.
- An ID check and a short background declaration if we approve you.
Before you apply
Who can apply?
Practitioners with at least 3 years of relevant experience, who can give at least 5 hours a week, and whose current employment allows side work (or who aren't employed). You can be anywhere, though most of our clients are Canadian.
Is this a job?
No. Associates are independent contractors. You choose the work orders you take, and you invoice TrazTech for the work.
How much work will I get?
It follows client demand in your practice, and it grows as the network does. We offer work as engagements come in, we're open with you about what we're seeing in your practice, and you can decline any offer without it counting against you.
Can I put it on LinkedIn?
Yes, please do. Once you're accepted you're a verified TrazTech Associate. Add it to LinkedIn as Associate, TrazTech (contract), link your public verify page, and use it on your CV and in proposals. It's a real credential, earned on a real assessment, and we give you a badge and a post you can edit.
Can I use AI tools in the assessment?
Yes. Reference material, tools and AI assistants are allowed, the same as on real work. We grade judgment, accuracy and how you communicate.
How is the assessment graded?
Parts are graded automatically, including written answers graded by an AI model against a fixed rubric. Borderline results go to a person. If you don't pass, you can ask for a human review.
Do you share my score?
No. We tell you whether you passed.
What do you check if I'm approved?
Two things, both quick. We confirm your identity (a photo of your ID and a selfie, or a short video call if you prefer), and you complete a short background declaration in the portal. If a client's contract needs a formal police check for an engagement, we'll ask you for one then.
How are rates set?
After you pass, you tell us what you'd need for a few sample pieces of work. We agree rates on the call. Rate changes need 60 days' notice and never apply to a work order you've already accepted.
Do I need to be in Canada?
Most of our clients are Canadian, and some ask for Canadian-resident teams. You can apply from elsewhere.