Orca Security
Big Ideas. Real People.
At Orca, we believe that in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader.
So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place. Ready to dive in and swim with our pod?
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Senior Software Engineer
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights:
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role:
On a typical day you'll:
- Write clean, concise code that is stable, extensible, and unit-tested appropriately
- Write production-ready code that meets design specifications, anticipates edge cases, and accounts for scalability
- Diagnose complex issues, evaluate, recommend and execute the best solution
- Implement new requirements within our Agile delivery methodology while following our established architectural principles
- Lead initiatives end to end from design and planning to implementation and deployment, while aligning cross-functional teams and ensuring technical excellence
- Test software to ensure proper and efficient execution and adherence to business and technical requirements
- Provides input into the architecture and design of the product; collaborating with the team in solving problems the right way
- Develop expertise of AWS, Azure, and GCP products and technologies
About you:
- Bachelor’s degree in Computer Science, Engineering or relevant experience
- 5+ years of professional software development experience
- Proven experience building data-intensive systems at scale
- Experience in working with micro-service architecture & cloud-native services
- Solid understanding of software design principles, concurrency, synchronization, memory management, data structures, algorithms, etc
- Hands-on experience with databases such as SingleStore, Postgres, Elasticsearch, Redis
- Experience with Python / Go (Advantage)
- Experience with distributed data processing tools like Kafka (Advantage)
Ready to apply?
Apply to Orca Security
Senior Software Engineer, AI Platform
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
As a Senior Software Engineer - AI at Orca, you’ll design, build, and own production grade AI agents that operate at the core of Orca’s cloud security platform. You’ll work on distributed, cloud native services that embed agentic AI workflows into Orca’s existing microservices architecture.
This role goes beyond building AI logic: you’ll be responsible for operating AI systems in production, ensuring they are observable, reliable, and continuously improving through systematic evaluation and data driven iteration.On a typical day you'll
- Design and implement cloud-native, distributed services that power Orca’s AI-driven security features
- Build and maintain agentic AI systems that reason over large-scale cloud security data and interact with multiple internal services
- Own AI agents in production, including deployment, monitoring, troubleshooting, and performance optimization
- Implement observability for AI systems, including metrics, logging, tracing, and alerting for agent behavior, quality, latency, and cost
- Develop continuous evaluation pipelines for agentic solutions, including offline testing, regression detection, and production feedback loops
- Design and optimize RAG pipelines that operate reliably over high-volume, high-variance security data
- Apply strong software engineering practices: clear APIs, clean abstractions, robust error handling, and scalable data flows
- Lead services end to end - from design and implementation to deployment and long-term operation
- Collaborate closely with Data Platform, Product, and Security Research teams to ensure AI behavior is correct, explainable, and trustworthy
About you
- 5+ years of professional software engineering experience building and operating production systems
- Strong proficiency in Python & Typescript and experience designing backend services
- Solid experience building cloud-native, distributed systems in a microservices architecture
- Hands-on experience building, deploying, and maintaining AI systems in production
- Proven hands-on experience building AI systems using LLM and agentic frameworks in production
- Practical experience with agentic AI workflows, including tool use, multi-step reasoning, and orchestration
- Experience implementing observability and monitoring for complex systems (metrics, logs, traces)
- Experience designing or working with evaluation frameworks for AI systems (quality, drift, latency, cost)
- Ability to reason about tradeoffs and continuously improve systems based on real-world data
Big advantage
- Experience evaluating AI systems in high-stakes domains (security, reliability, correctness)
- Background in cloud security, cybersecurity, or large-scale SaaS platforms
- Familiarity with RAG evaluation techniques, prompt versioning, and regression testing
- Experience operating AI-enabled services at scale in AWS or similar cloud environments
Ready to apply?
Apply to Orca Security
Senior Software Engineer - Data & AI Security
Share this job
* Fully remote from UK *
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our R&D org. and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
As a Senior Software Engineer on the DSEC (Data & AI Security) team at Orca Security, you’ll be part of a core group responsible for protecting customer data and AI assets at scale. The team scans and analyzes a broad set of data stores and AI services - from managed databases and container images to object storage buckets and VMs - to find sensitive data, keys, PII, and misconfigurations. You’ll also map, model, and assess cloud AI services to give customers clear visibility and security insights across their data and AI footprint.
This role is a strong fit if you want to build the infrastructure that powers our Data Security Posture Management (DSPM) and AI security capabilities. You’ll help design and run scanning pipelines for managed databases across major cloud providers, implement detection engines for PII and secrets across file systems and databases, and enable our security researchers to discover data risks and AI misconfigurations quickly and reliably. Your work will directly affect how thousands of organizations understand and security their sensitive data and AI workloads.
We’re looking for engineers who care about data security, distributed systems, cloud databases, and AI/ML platforms - and who want to have a real impact by building robust, scalable security tooling. This is also a great opportunity to take ownership, drive initiatives, and grow through collaboration, mentorship, and technical leadership.
Our Stack: Python, Go, Postgres, Redis, Kafka, SQS, AWS, GCP, Azure
On a typical day you'll
- Design, implement, and maintain scalable backend services for scanning and analyzing managed databases, object storage, and data assets across cloud providers
- Build and extend infrastructure for detecting sensitive data, secrets, and keys across customers’ databases, buckets, VMs, and containers so customers can be alerted when risks are found
- Integrate and evolve detection engineers for PII, secrets, compliance, and vulnerabilities across Linux and Windows workloads.
- Map, model, and assess cloud AI services and managed databases to surface misconfigurations, exposure, and security posture
- Collaborate with security researchers and product managers to turn complex requirements into clear, impactful product features
- Write clean, efficient, and testable code, ensuring high performance and reliability at scale
- Participate in design and code reviews to keep quality and security standards high
- Lead features end-to-end - from design and planning through deployment and monitoring
- Improve system observability, performance, and resilience in production environments
- Stay current with developments in the data security, DSPM, and AI/ML security
About you
- Bachelor’s degree in Computer Science, Engineering, or equivalent experience
- 5+ years of professional software development experience
- Strong experience building backend services or distributed systems
- Hands-on experience with Python or Go
- Experience with major cloud providers (Amazon Web Services, Google Cloud, Microsoft Azure)
- Strong foundation in software design principles, concurrency, memory management, data structures, and algorithms
- Passionate about building great products and solving real-world security challenges
- Self-driven, proactive, and comfortable taking ownership and initiative
- A strong communicator and a true team player who thrives in a collaborative environment
Bonus points for
- Experience with managed databases (RDS, BigQuery, CloudSQL, Azure SQL, Redshift, DynamoDB, …) and secure scanning/query patterns
- Familiarity with DSPM, or privacy engineering in cloud environments
- Experience with cloud AI/ML services (Vertex AI, Bedrock, SageMaker, Azure OpenAI, …)
- Background in cybersecurity, especially in cloud security domains
Ready to apply?
Apply to Orca Security
Security Researcher
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud—so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
We’re looking for a Security Researcher to help us stay ahead of threats across cloud, runtime, and application environments. This role is intentionally broad and can fit backgrounds in operating systems and Linux internals, vulnerability research, DFIR, penetration testing, and incident response, threat detection, AppSec, and cloud security.On a typical day you'll
- Research and analyze emerging threats across cloud platforms, applications, APIs, and runtime environments
- Investigate attacks and security incidents, then turn findings into improved detections and product capabilities
- Build detection logic, analytics, rules, and signatures for vulnerabilities, exposures, and active threats
- Contribute to runtime and cloud security visibility and detection (Linux, containers, Kubernetes)
- Prototype tools and automation to speed up research and improve detection accuracy
- Share knowledge through internal enablement, blog posts, whitepapers, or conference talks
About you
- 4+ years in security research or security engineering
- Strong foundation in one or more of:
Operating systems (especially Linux)
Vulnerability management/research
DFIR, incident response, or threat hunting
Cloud/container/runtime security - Strong analytical “attacker mindset” and ability to explain complex findings clearly
- Proficiency in Python (Go is a plus)
- Experience working with telemetry and data (SQL/Elastic or similar is a plus)
- Comfortable collaborating across teams in English
Nice to have
- Kubernetes/containers, major clouds (AWS/Azure/GCP)
- eBPF, reverse engineering, offensive security experience
- Open-source security tooling familiarity, or AI/automation in security workflows
Ready to apply?
Apply to Orca Security
Senior Security Researcher
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our CTO office and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud—so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
We’re looking for a Senior Security Researcher to drive high-impact research across cloud, runtime, and application environments, and translate it into product-grade detections. This is a hands-on role for someone who can lead investigations end-to-end: from understanding attacker tradecraft and vulnerabilities, through building reliable detection logic, to influencing product direction.On a typical day you'll
- Lead deep-dive research into real-world attacks, vulnerabilities, and emerging cloud and runtime techniques
- Own complex investigations (DFIR, threat hunting, root-cause analysis) and convert learnings into durable detections
- Design and implement advanced detection logic and analytics across cloud assets, containers, Kubernetes, and Linux runtime telemetry
- Build prototypes and production-ready components that improve detection accuracy, fidelity, and coverage
- Partner closely with engineering and product to shape roadmap priorities and guide implementation details
- Develop research methodologies, testing frameworks, and validation processes for new detections
- Mentor and level up other researchers and engineers through reviews, knowledge sharing, and technical guidance
- Represent the team externally through publications, technical blogs, and conference talks
About you
- 7+ years of experience in security research, detection engineering, incident response, or comparable hands-on security roles
- Demonstrated expertise in at least two of the following areas (and working knowledge in the others):
Linux internals / operating systems fundamentals
Cloud security (AWS/Azure/GCP), including common attack paths and misconfiguration patterns
DFIR, threat hunting, and investigation workflows using telemetry and logs
Vulnerability research or vulnerability management at scale (triage, prioritization, exploitation understanding)
Application and API security fundamentals - Strong programming skills in Python (Go is a strong plus); ability to produce maintainable research code and production logic
- Strong data skills: comfortable working with large telemetry datasets (SQL and log analytics platforms such as Elastic or similar)
- Ability to reason about attacker behavior, build threat models, and validate detections with repeatable testing
- Excellent written and verbal English communication, including the ability to explain nuanced technical tradeoffs to non-research audiences
- Track record of driving cross-team execution and shipping impactful security capabilities
Nice to have
- Experience with Kubernetes and container runtime security
- eBPF or low-level telemetry approaches, syscall or kernel-level visibility
- Reverse engineering and malware analysis
- Offensive security background (web, cloud, exploit development)
- Contributions to open-source security projects or published research
- Experience using automation or AI-assisted techniques to scale research and detection workflows
Success looks like
- You consistently deliver new detections or improvements that measurably reduce false positives and increase coverage
- Your investigations produce clear, actionable insights and influence product direction
- You raise the technical bar for research quality, validation rigor, and operational maturity across the team
Ready to apply?
Apply to Orca Security
Software Engineering Team Lead
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our Sales team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights:
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the Role:
As a Team Lead on the Data Platform, you’ll guide one of Orca’s most strategic engineering groups - the team building and evolving the core data ingestion and processing infrastructure that powers our entire platform. Handling billions of cloud signals daily, the team ensures scalability, reliability, and efficiency across Orca’s architecture.
You’ll lead a group of talented senior engineers, providing both technical and people leadership while staying hands-on in design and implementation. Together, you’ll drive key architectural decisions and evolve our ingestion and processing layers to support real-time pipelines, improve observability, and enable greater horizontal scalability.
We’re looking for an experienced Team Leader eager to make a foundational impact on Orca’s next-generation cloud security data platform.
Our Stack: Python, Go, SingleStore, Postgres, Redis, Kafka, AWS.
What You’ll Do:
- Lead, mentor, and develop a team of senior software engineers through one-on-ones, feedback, and technical guidance
- Own and drive the delivery of high-impact projects end-to-end, from design through deployment and production monitoring
- Design and review architecture for large-scale distributed systems focused on data ingestion, normalization, and availability
- Collaborate cross-functionally with Product, SRE, and other R&D teams to define priorities, interfaces, and success metrics
- Ensure the reliability, scalability, and observability of core services, introducing SLOs and best practices for operations
- Participate in incident management, postmortems, and continuous improvement initiatives
- Foster a culture of technical excellence and accountability within the team
- Write and review clean, maintainable, and tested, take part of the on-call rotation
What You Bring:
- Bachelor’s degree in Computer Science, Engineering, or equivalent experience
- 7+ years of professional software development experience, including at least 2 years in a team lead role
- Proven experience leading teams that build and operate large-scale, data-intensive systems
- Strong understanding of distributed systems design, concurrency, synchronization, data modeling, and performance optimization
- Hands-on experience with at least one of: Python, Go - Must
- Experience with distributed data processing tools like Kafka (Advantage)
- Hands-on experience with databases such as SingleStore, Postgres, Redis
- Solid understanding of cloud-native architectures and services (AWS preferred)
- Excellent communication and collaboration skills, with the ability to align engineers, product managers, and stakeholders
- Experience mentoring engineers and guiding technical growth
- Comfortable balancing hands-on technical work with people and project leadership responsibilities
- Experience with real-time data processing and streaming pipelines (Advantage)
Ready to apply?
Apply to Orca Security
Software Engineer - Security Intelligence & Engagement
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
As a Software Engineer on the Security Intelligence & Engagement team, you'll be part of a domain responsible for closing the loop between security insight and action across the Orca platform.
Our team builds the systems that transform large-scale cloud security data into meaningful risk insights, such as risk scores, trends, and contextual signals, and the experiences that drive customer response, including alerts, notifications, and guided remediation missions.
You'll work on scalable backend services and distributed systems that power how security insights are generated, aggregated, and delivered to users. The team operates across multiple product domains to ensure that insights lead directly to action, enabling customers to prioritize and resolve risks effectively.
This role is a great opportunity to work on high scale cloud security systems, collaborate across teams, and contribute to building reliable services that sit at the center of Orca's platform.
On a typical day you'll
• Design and implement backend services that generate and deliver security insights and engagement workflows
• Write clean, maintainable, and well-tested code that meets production quality standards
• Build scalable systems that process and aggregate large volumes of cloud security signals
• Collaborate with product managers, engineers, and designers to translate insights into actionable user experiences
• Troubleshoot and resolve complex system issues while improving system reliability and observability
• Contribute to architectural discussions and help evolve services to support growing scale and new capabilities
• Implement new features following Agile development practices and established engineering standards
• Continuously improve system performance, scalability, and maintainability
About you
• Bachelor's degree in Computer Science, Engineering, or relevant experience
• 3+ years of professional software development experience
• Experience building backend services or data driven systems
• Familiarity with microservice architectures and cloud native environments
• Strong understanding of software engineering fundamentals including data structures, algorithms, concurrency, and system design
• Experience working with databases such as Postgres, Elasticsearch, Redis, or similar
• Experience with Python or Go (advantage)
• Familiarity with distributed systems or event driven architectures such as Kafka (advantage)
Ready to apply?
Apply to Orca Security
Head of Research
Share this job
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights
- High-growth: Over the past Seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role
As the Head of Research, you will lead Orca Security’s threat-research, security-innovation, and vulnerability-discovery efforts. You will define the strategy for how we uncover threats, identify novel attack vectors, influence product direction, and contribute thought leadership to the cybersecurity community. You will manage and grow a team of world-class researchers, work closely with product, engineering and go-to-market teams, and ensure our research remains cutting-edge, rigorous and impactful. This role emphasizes strong people leadership and cross-functional execution, alongside technical depth and hands-on research judgment.
What you'll do
- Develop, own and evolve the research strategy by defining high value focus areas (for example misconfigurations, identity threats, workload vulnerabilities, and emerging attack techniques), and ensure alignment with Orca’s product roadmap and business objectives.
- Lead, coach, and mentor a multidisciplinary research team (researchers, threat analysts, and engineers).
- Build a healthy, high-performing org, including hiring, onboarding, and performance management.
- Partner closely with product and engineering leadership to turn research insights into concrete roadmap items, detection logic, and customer value.
- Drive discovery of new vulnerabilities, attack techniques, or adversary behaviors across cloud and modern infrastructure environments (for example containers, serverless, data stores, IAM).
- Define metrics for research impact (for example vulnerabilities discovered, time to validate and operationalize new findings, research-driven product improvements, external reach).
- Establish and maintain external partnerships (industry peers, academic groups, independent researchers) to expand Orca’s capabilities and pipeline.
- Publish and present research findings (blog posts, white papers, conference talks).
- Lead vulnerability disclosure and responsible communications.
- Ensure the research function has the right infrastructure and processes (tooling, sandboxes, repeatable experimentation, documentation standards).
- Stay current with the threat landscape, emerging technologies, attacker tradecraft, and relevant compliance or regulatory shifts.
About you
- 7+ years of experience in security research, threat intelligence, vulnerability discovery, offensive security, or closely related roles.
- Proven people management experience (mandatory), including hiring, mentoring, and growing high-performing teams.
- Demonstrated ability to set a research vision, prioritize effectively, and execute through others in a cross-functional environment.
- Strong research fundamentals: designing experiments, validating hypotheses, and turning ambiguous signals into clear findings and recommendations.
- Excellent stakeholder management and partnership skills, including the ability to collaborate deeply with engineering and product teams.
- Strong written and verbal communication skills, including the ability to communicate complex technical concepts to varied audiences.
- Ability to operate hands-on when needed (for example to review technical work, guide investigations, or unblock the team).
- Solid coding fluency and automation mindset (languages and stack flexible, Python/Go helpful).
Ready to apply?
Apply to Orca Security