The surge is real, and the backlog is hardening
Method Security has nine salaried roles open, a median band of $200,000, and a spread from $130,000 to $235,000 across engineering, legal, finance and client-facing delivery. The vacancies have sat static long enough for the market to test itself against them. No new roles were added in the past seven days.
| Role | Location | Salary Band |
|---|---|---|
| Senior Software Engineer | New York | $195,000–$235,000 |
| Design Engineer | New York | $150,000–$200,000 |
| Solutions Engineer | San Francisco | $170,000–$200,000 |
| Solutions Consultant | San Francisco | $170,000–$200,000 |
| Senior Counsel | Washington, D.C. | $150,000–$200,000 |
| Senior Accounting Manager | Washington, D.C. | $150,000–$200,000 |
The slate has remained static, giving the market time to evaluate it.
The talent market offers no relief
MIT researchers tracking U.S. labor dynamics since 1980 found automation has replaced more jobs than it created over four decades. The displacement rate more than doubled in the 1980–2018 period compared to the prior forty years. At the same time, firms that adopt AI extensively grow employment about 6 percent faster and sales nearly 10 percent faster over five years, but they concentrate hiring in roles where human judgment complements the technology.
Government hiring provides a parallel warning. The Justice Department has lost thousands of experienced attorneys since the start of the Trump administration and backfilled only a fraction, snarled by a lack of qualified candidates, bureaucratic delays, and hiring freezes. When the federal government, with its structured pay scales and mission draw, cannot fill senior counsel roles, a private firm asking for the same profile at a comparable band faces a thinner pool.
Method's board data shows the salary bands are competitive with the top of the market. What the data cannot show is how many applicants clear the technical screen.
What the roles reveal: the AI-security gap is widest here
Recruiters tracking the space say the "AI security engineer" title barely existed two years ago; by mid-2026 it was ubiquitous. Method's Senior Software Engineer band tops out at $235,000. The Design Engineer role is seated in New York at $150,000–$200,000. Solutions Engineer and Solutions Consultant, both in San Francisco at $170,000–$200,000.
The non-technical roles are equally revealing. Senior Counsel at $150,000–$200,000 in D.C. reflects the regulatory pressure cooker: Deloitte's Q4 2024 State of Generative AI report found compliance is the top concern for organizations deploying gen AI. That hire navigated the Executive Order on Safe, Secure, and Trustworthy AI (October 2023) and emerging state laws.
Underneath every title sits the same screening filter the market has converged on: OWASP LLM Top 10 fluency. TryHackMe's AI security learning path, launched in 2026, is explicitly matched to that framework — "the exact list hiring managers are starting to screen for." A recruiter's four-move playbook for candidates maps directly to Method's roles: security footing first, then hands-on attack labs (not vocabulary), then framework fluency, then proof — "show your proof, not claims."
Auburn's 2026 work on automated reverse-engineering of complex circuits from limited observations, combining machine learning with side-channel analysis, illustrates the depth now expected for supply-chain and model-integrity verification. RAND's SIDC architecture (rigorous partitioning, unidirectional data diodes, formally verified cross-realm protocols) sets the high-water mark for the infrastructure layer.
In short, the roles cluster around three non-negotiables: demonstrated offensive capability against live models, fluency in the OWASP LLM Top 10 vocabulary that buyers now require, and the ability to embed that expertise into deliverable engagements — code, architecture reviews, compliance artifacts, or managed services. Generic cloud-security certs and CISSPs don't appear in any of the salary bands.
Inside the gauntlet: no published rubric, but the trail is clear
Industry baseline pipelines now run SAST, fuzzing, smoke tests and sanity checks on every commit, with infrastructure-as-code guardrails preventing drift. At Amazon and Meta scale, that yields 10x to 1,000x deployment frequency.
A study of control-room operators in Iranian process industries (15 operators, three sectors, three months of interviews) surfaces a parallel: "People who choose to work in the control room must be mentally fit. We need people who can react quickly in sensitive situations." The operators describe 12-hour shifts, electromagnetic radiation, vibration-induced focus loss, and the constant dread that a mistake triggers catastrophe.
The medical fellowship literature offers the clearest structural analog for the loop itself. Stanford researchers found programs interviewing 20-plus physicians per slot, residents packing 6–15 interviews each, and a system so redundant that "there's a lot of redundancy on both sides of the equation. We thought we needed to streamline this." Their proposed fix: preference signaling before travel, capped interviews, tiered ranking, an algorithm to eliminate no-chance matches. The fellowship researchers' goal: "cut the interviews while doing no harm."
What the research does not show is Method's exact stage count, its pass rates, or whether it uses take-homes, live coding, or architecture reviews. The board data confirms the roles and compensation; the security-engineering content confirms the technical floor; the high-stakes hiring analogs confirm the structural pressure.
Candidate strategies that actually work
Hiring-platform data shows a market moving toward quiet hiring. Recruiter-sourced candidates jumped 72 percent since 2023 to nearly 15 percent of hires, while cold applications dropped from 73 percent of offers in 2023 to 60 percent in 2025.
Referrals remain the highest-leverage channel. Interviews from referrals convert to offers 35 percent more often than cold applications, and referrals accounted for roughly 10 percent of offers between July 2024 and July 2025. But the strongest referrals come from weak ties — friends of friends, not close colleagues. O'Donnell advises giving the referrer "valid business reasons why you're impressed by the company and that you're looking to earn an interview."
Timing matters more than volume. O'Donnell's top rule for online applications: be in the first 20 to 40 applicants. Set alerts for the exact titles Method Security uses (Senior Software Engineer, Solutions Engineer, Design Engineer) and apply the day the role posts. Reposted listings often reflect platform contracts, not open requisitions; treat them as closed.
Your online footprint now functions as a pre-screen. Recruiters use it to "prove you're real, credible and actually a fit for the role." O'Donnell recommends picking one platform and posting consistently in five formats: industry observations, contrarian takes, then-vs-now comparisons, listicles breaking down a technical process, and behavioral stories showing how you solved a hard problem.
Completeness eliminates easy rejections. "Plenty of people rush to fill out job forms without being thorough and accurate, which can easily get you disqualified," O'Donnell said.
At the interview stage, Rambhia's framework from CMU applies directly: treat it as a conversation, not an evaluation. Candidates who memorize scripts, jump to solutions without explaining reasoning, or fail to ask clarifying questions flag themselves as junior. The structured alternative: present your story deliberately, demonstrate proof of skills with concrete artifacts, ask thoughtful questions, engage as a partner. Tools like VMock can sharpen the resume and pitch, but they don't replace the live ability to walk through a real incident response or architecture decision.
Frontier-tech hiring has become a demonstrated-competence market
SignalFire's analysis of 80 million companies found that while total hiring at large tech firms dropped 25 percent from 2019 levels, engineering roles declined only 11 percent. In 2025, engineers made up 55 percent of all new hires across the 12 "Tech Majors" — Alphabet, Meta, Apple, Amazon, Microsoft, Netflix, Nvidia, Tesla, Uber, Airbnb, Block, and Stripe. Early-stage startups collectively hired 7 percent more engineers in 2025 than in 2019.
The acceleration of AI adoption is the catalyst. Deloitte reports token costs have fallen 280-fold in two years, and AI startups now scale from $1 million to $30 million in revenue five times faster than SaaS companies did. Yet only 11 percent of organizations have agents in production; 38 percent are piloting, 42 percent are still developing strategy, and 35 percent have none at all.
Deloitte's data shows U.S. aerospace and defense spending on AI and generative AI is projected to hit $5.8 billion by 2029 — 3.5 times 2025 levels. The Space Force's FY2025 Data and AI Strategic Action Plan prioritizes enterprise-wide AI governance, a data-driven workforce, and deeper industry-academia partnerships.
Deloitte notes manufacturers are moving to "granular, skills-based workforce modeling and planning," and agentic AI is being used to capture tacit knowledge and generate SOPs that accelerate onboarding. The knowledge half-life in AI has shrunk to months from years; one CIO told Deloitte, "The time it takes us to study a new technology now exceeds that technology's relevance window."
Deloitte reported industry data projects the engineering and construction sector will need 499,000 new workers by 2026, up from 439,000 in 2025. Construction wages rose 4.2 percent year-over-year as of August 2025. According to Deloitte, by 2031, 41 percent of construction workers are expected to retire while only 10 percent are under 25; a shortage of over two million skilled craft professionals looms by 2028. In manufacturing, immigrant workers filled nearly one in four U.S. production jobs in 2024, and shifting immigration policies may further restrict the pool. The migration of engineering talent to technology firms (driven by demand for tech-enabled skills) is intensifying competition for skilled workers.
Deloitte found only 11 percent of organizations have agents in production; 38 percent are piloting, 42 percent are still developing strategy, and 35 percent have none at all.
Data analysis skills in job postings are projected to rise from 9 percent in 2025 to nearly 14 percent by 2028; data science from 3 percent to 5 percent.
Deloitte's "build, buy, or borrow" framework captures the response: invest in core talent (build), recruit critical expertise externally (buy), use contractors for fluctuating demand (borrow). Method Security's simultaneous senior-level openings read as a concentrated "buy" maneuver in a market where "build" cycles are too slow and "borrow" won't clear clearance requirements.
Method Security's backlog is still hardening. The candidates who clear it won't be the ones listing certifications. The rest of the sector is already copying the test.
Working in frontier tech? Zero G Talent tracks the openings: see every open Method role, browse frontier tech jobs, the companies hiring, and the people building the field.