Senior Security Engineer- San Francisco HQ

About the role

As Orb's first dedicated Security Engineer, you'll own the hands-on technical security of a platform trusted with our customers' most sensitive data — their revenue. Billing sits at the center of how our customers run their businesses, and as we've grown (and as we lean heavily into AI-assisted development), securing our infrastructure, our code, and the way we ship has become a full-time job of its own. You'll make the secure path the default across our AWS environment and our codebase, working directly with our engineering lead and partnering closely with Adyen's security organization.

In this role you will

• Own application and infrastructure security across our AWS environment — threat-modeling new systems, reviewing designs and code, and fixing the issues you find
• Own identity and access — from least-privilege IAM to how engineers and AI agents get scoped, auditable access to production
• Set the security baseline for the whole engineering org, turning one-off fixes into durable controls that make the secure path the default
• Build security into how we ship, partnering with the platform team on CI/CD and developer tooling
• Shape how AI coding agents operate safely against real systems — one of the more interesting security problems we have
• Partner closely with Adyen's security organization, bringing their scale and practices to bear as we grow

About you

• 5+ years of experience in software or security engineering
• Strong hands-on background securing cloud-native systems (AWS preferred), comfortable reading and writing code
• Depth across several of: application and product security, IAM and access management, vulnerability management, detection and response
• You default to solving security problems structurally — making the safe path the default rather than adding process
• Comfortable being the first dedicated security hire, operating with a lot of autonomy
• Backend: Python
• Datastores: PostgreSQL + Apache Druid+ Clickhouse