Need to leave this site fast? Press Esc twice, or tap Quick exit. It opens a weather page in place of this one. It does not erase your history; here is how. Quick exit
HACKING THE WORKFORCE Get started
An advisory roundtable in progress

Security · For organizations

Digital security for the organizations that hold our communities together.

Trauma-informed capacity building and advisory services for Black, Brown, LGBTQ+ and justice-focused organizations, and for the public-sector teams that serve them.

Book a consultation

The 4C program for organizations

Delivered as a short series or 1:1 coaching. You leave with controls in place and a guide your team wrote with us: security practices you can actually keep.

Org threat modeling

What you protect, from whom, and what it would cost to lose.

Password managers and MFA

Rolled out together, with the staff who will live with them.

Secure communications

Which channel for which conversation, and why.

Self-doxxing clean-up

Find and remove what the internet already knows about your people.

Misinformation defense

Anti-doxxing and anti-misinformation practices built for targeted communities.

A guide you keep

Co-created, plain-language, and short enough that people read it.

Talent to Risk

The roles we fill. Two ways to get the work done.

These are the roles our members train for and interview for. You can hire one of them, or have us do the work with a practitioner-led team of apprentices while you decide.

Door 1 · Hire

Interview our members

Pre-trained, clearance-pending where needed, and screened by a no-AI reasoning evaluation. Tell us the role and the stack; we send candidates who have already done the work on real casework. No placement fee until they start.

Request candidates

Door 2 · Engage

Let us do the work

The same roles delivered as a service: a senior practitioner leads, apprentices earn their hours on your project, you get the outcome at a nonprofit rate. Every engagement is also a working interview; hire the people you liked.

Scope an engagement

Nine role families we train, place, and deliver

Security program leadBuilds a program where none exists: policy, roadmap, first controls.
Cloud security engineerSafe migration and day-two operations in AWS, Azure, Google Cloud.
Compliance and audit analystSOC 2 and similar, with automation where it pays.
Risk analystFinds and ranks what matters; third-party and vendor risk.
SOC analystMonitoring, triage, and detection tuning; stands up or improves a SOC.
Privacy and data protection analystEspecially for health and human services data.
Incident responderPlans before the incident, works alongside you during one.
Security awareness coordinatorTraining programs people remember, built on the 4C model.
Critical infrastructure and OT securityState, local, tribal and territorial governments; K-12; healthcare; utilities.

Rates, placement terms, and the engagement model are Pricing published here when the next cohort opens.

Where our method has proven results

We ask every client and member the same two questions: what was true before Hacking the Workforce, and what is true now. Their answers, in their words, with written consent.

Senator Janelle K. Sarauw · campaign cybersecurity advisory

Before HtWQuote to come, with written consent.
After HtWQuote to come, with written consent.

An organization client

Before HtW“To come”
After HtW“To come”

A national philanthropic intermediary (anonymized by agreement)

Before HtW“To come”
After HtW“To come”
Read all testimonials Funders and coaching clients are never named without written consent.

Start with a conversation, not a contract.

Book a consultation

How you can help

Hire one. Fund one.

Hiring from us is help. So is sponsoring the seat your next hire came from.

Hire a graduateOr bring us in to help your organization. Mentor a studentOne hour a month. We train you. Give100% reaches us. Zeffy covers the fees.