Senior Security Engineer- San Francisco HQ

About Orb: We’re a team that cares deeply about the work, the people we do it with, and the customers we do it for. Everyone at Orb has real ownership over their work, direct access to customers, and a voice in how the company grows. We’re building the revenue design platform that helps teams automate billing, evolve pricing, and grow revenue with confidence.

Looking ahead, joining forces with Adyen expands what we can build and raises the ceiling on the problems we get to solve for customers. The challenges are uniquely interesting, and you’ll be surrounded by thoughtful, ambitious people who move fast and hold a high bar.

For San Francisco Bay Area , New York, and Amsterdam residents, we've built a hybrid work culture where we are in office 3 days/week. For remote roles, we ask you to join us in person 1x per quarter. Our values, customer centricity, minutes matter, run with it, attention to detail, and go further together are at the core of everything we do.

About the role:

As Orb's first dedicated Security Engineer, you'll own the hands-on technical security of a platform trusted with our customers' most sensitive data — their revenue. Billing sits at the center of how our customers run their businesses, and as we've grown (and as we lean heavily into AI-assisted development), securing our infrastructure, our code, and the way we ship has become a full-time job of its own. You'll make the secure path the default across our AWS environment and our codebase, working directly with our engineering lead and partnering closely with Adyen's security organization.

In this role you will:

Own application and infrastructure security across our AWS environment — threat-modeling new systems, reviewing designs and code, and fixing the issues you find

Own identity and access — from least-privilege IAM to how engineers and AI agents get scoped, auditable access to production

Set the security baseline for the whole engineering org, turning one-off fixes into durable controls that make the secure path the default

Build security into how we ship, partnering with the platform team on CI/CD and developer tooling

Shape how AI coding agents operate safely against real systems — one of the more interesting security problems we have

Partner closely with Adyen's security organization, bringing their scale and practices to bear as we grow

About you:

5+ years of experience in software or security engineering

Strong hands-on background securing cloud-native systems (AWS preferred), comfortable reading and writing code

Depth across several of: application and product security, IAM and access management, vulnerability management, detection and response

You default to solving security problems structurally — making the safe path the default rather than adding process

Comfortable being the first dedicated security hire, operating with a lot of autonomy

Orb’s Tech Stack:

At Orb, we believe great engineers can learn any stack, so you do not need experience with these specific tools, and we encourage you to apply regardless.

Frontend: Typescript + React + Tailwind CSS

Backend: Python

Datastores: PostgreSQL + Apache Druid+ Clickhouse

Streaming Platforms: Kafka + Spark Streaming