Skip to content

Careers

Be the bridge

We hire practitioners. People who have run the engagement, sat in the audit, and had the difficult conversation with a supplier.

In short

Cloudgap hires security practitioners across AI governance, fractional security leadership, penetration testing and supply chain assurance. The practice is remote-first, London-based and founded in 2015, and engagements are embedded and sprint-based rather than report-driven.

Why here

What the job is actually like

  • Remote-first, genuinely

    Not hybrid-with-an-expectation. The team works where it is most effective, and meetings are scheduled to be joinable rather than attended.

  • Training budget that gets used

    Certifications - SANS, OSCP, CISM, ISO lead auditor and implementer tracks - plus dedicated research time. The threat landscape moves; standing still is a business risk.

  • Health and wellbeing

    Private health cover, mental health support and a wellness allowance. Security work has a real burnout problem and pretending otherwise does not help.

  • Work that ships

    Engagements are embedded and sprint-based, so what you recommend is what you then help implement. If you have spent a career writing reports nobody actioned, this is the difference.

Open roles

Where we are hiring

If none of these fit but you would be good here, say so anyway. We have made roles for people before.

  • Senior AI Governance Consultant

    Remote / London · Full-time · AI safety

    Apply

  • Post-Quantum Cryptography Analyst

    Remote / UK · Contract · Research

    Apply

  • Managed vCISO (Associate)

    London hybrid · Full-time · Strategy

    Apply

  • Security Operations Engineer

    Remote · Full-time · Technical

    Apply

[Client input required · Q23]

Confirmation that these four roles are still open, and a proper description per role (responsibilities, requirements, salary band, location, closing date). A stale job listing makes an organisation look neglected, and salary bands materially improve applicant quality. Once supplied, each role gets a JobPosting schema.

Nothing here fits?

Tell us what you would want to be working on, and what you have actually delivered. That is more useful to us than a CV.

Email the team

Prefer to ask a question first? Use the careers route on the contact page.