Senior Security Engineer- San Francisco HQ

About Orb: We’re a team that cares deeply about the work, the people we do it with, and the customers we do it for. Everyone at Orb has real ownership over their work, direct access to customers, and a voice in how the company grows. We’re building the revenue design platform that helps teams automate billing, evolve pricing, and grow revenue with confidence. Looking ahead, joining forces with Adyen expands what we can build and raises the ceiling on the problems we get to solve for customers. The challenges are uniquely interesting, and you’ll be surrounded by thoughtful, ambitious people who move fast and hold a high bar. For San Francisco Bay Area , New York, and Amsterdam residents, we've built a hybrid work culture where we are in office 3 days/week. For remote roles, we ask you to join us in person 1x per quarter. Our values, customer centricity, minutes matter, run with it, attention to detail, and go further together are at the core of everything we do. ABOUT THE ROLE: As Orb's first dedicated Security Engineer, you'll own the hands-on technical security of a platform trusted with our customers' most sensitive data — their revenue. Billing sits at the center of how our customers run their businesses, and as we've grown (and as we lean heavily into AI-assisted development), securing our infrastructure, our code, and the way we ship has become a full-time job of its own. You'll make the secure path the default across our AWS environment and our codebase, working directly with our engineering lead and partnering closely with Adyen's security organization. IN THIS ROLE YOU WILL:

• Own application and infrastructure security across our AWS environment — threat-modeling new systems, reviewing designs and code, and fixing the issues you find
• Own identity and access — from least-privilege IAM to how engineers and AI agents get scoped, auditable access to production
• Set the security baseline for the whole engineering org, turning one-off fixes into durable controls that make the secure path the default
• Build security into how we ship, partnering with the platform team on CI/CD and developer tooling
• Shape how AI coding agents operate safely against real systems — one of the more interesting security problems we have
• Partner closely with Adyen's security organization, bringing their scale and practices to bear as we grow ABOUT YOU:
• 5+ years of experience in software or security engineering
• Strong hands-on background securing cloud-native systems (AWS preferred), comfortable reading and writing code
• Depth across several of: application and product security, IAM and access management, vulnerability management, detection and response
• You default to solving security problems structurally — making the safe path the default rather than adding process
• Comfortable being the first dedicated security hire, operating with a lot of autonomy Orb’s Tech Stack: At Orb, we believe great engineers can learn any stack, so you do not need experience with these specific tools, and we encourage you to apply regardless.
• Frontend: Typescript + React + Tailwind CSS
• Backend: Python
• Datastores: PostgreSQL + Apache Druid+ Clickhouse
• Streaming Platforms: Kafka + Spark Streaming
• Cloud Platform: AWS Benefits:
• Excellent medical, dental, and vision insurance
• One Medical membership
• Unlimited PTO plus an additional week off between Christmas and New Year’s
• 401k plan
• 16-week paid parental leave with equity vesting
• Commuter stipend
• Catered lunches in the office
• Annual learning & development stipend
• Meaningful equity in the form of stock options Equal Opportunity Employer We work with each other day in and day out, and strongly believe that building a diverse and inclusive team is key to our long-term goals and success as a company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law.

laptop-ats-crawler v3