Karakor is operator-led and intentionally small. We are not actively recruiting. We are open to a serious conversation with the right senior practitioner — the kind of conversation that begins with reading this site and continuing to think about it afterward.
The firm is operator-led on purpose. We grow by adding the right person — not by filling a seat.
Every engagement at Karakor is delivered by the practitioner the client meets on the first call. We do not hand work down to a junior team because we do not have one. That model survives only as long as the practitioners doing the work are senior, accountable, and able to operate without supervision.
That is also why we do not run an open requisition. Filling a seat against a job description tends to produce candidates who fit the description. The work needs people who fit the practice — a much narrower filter, and one that is hard to run at scale.
If you have read this site and the way we write about the work has resonated with how you have wanted to work, we want to hear from you. Even when we are not hiring, we read every serious inbound.
Three profiles we would read.
Not job descriptions. The shapes of practitioners whose work we would recognise as fitting the practice.
Senior cybersecurity practitioners
Five-plus years of hands-on assessment, hardening, and incident-response work in environments where the deliverable is a written report a senior engineer can act on. NIST CSF fluency, not certification-checkbox familiarity. Comfortable in front of a partner, a CISO, or a procurement team — not just behind a keyboard.
Senior software engineers
Built systems that have shipped to production under real security constraints. Read the article on the first commit and nodded. Comfortable working alone, writing the documentation, owning the handoff. Not a fan of frameworks that lock the client into a managed service.
Private-AI specialists
Shipped on-premises or air-gapped model deployments. Have opinions about retrieval that respect matter boundaries, hallucination detection that actually works, and the difference between a model that refuses to answer and one that confidently makes things up. Tulgra-adjacent experience welcome but not required.
Honest about the misfit.
Saying so up front saves everyone a coffee.
Generalist consultants who have not personally delivered the work they would advise on.
Sales-led practitioners. The work is the marketing.
Operators who want a perpetual managed-service relationship with the client. Engagements end. That is the design.
Anyone uncomfortable saying no to a scope that does not fit.
Write a letter, not a résumé drop.
We respond to thoughtful inbound. A short letter — three paragraphs is plenty — telling us:
- What you have actually shipped, with enough specificity that we can ask follow-up questions about it.
- What part of how we write about the work resonated, and what part you would push back on.
- What you are looking for that a larger consultancy or an in-house role has not been able to give you.
Send it to careers@karakorconsulting.com. A CV is welcome but not required, and is read after the letter.
We read every serious inbound. We do not respond to mass applications, recruiter outreach, or generic résumé drops.
We respond within two business days. Scoping calls are obligation-free and run thirty minutes.