Description
Big Ideas. Real People.
At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.
We’re looking for driven and talented people like you to join our Research team and our mission to change the future of cloud security. Ready to dive in and swim with our pod?
Highlights:
- High-growth: Over the past Seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.
- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.
About the role:
We're looking for a Cloud Security Researcher to drive runtime threat research for Orca's Cloud Detection and Response (CDR) capabilities - understanding how attackers behave inside live cloud workloads and turning that into detections that protect our customers. As a senior member of the team, you'll also mentor our junior researcher.
On a typical day you'll:
- Research attacker tradecraft against live cloud workloads - compute, containers, Kubernetes, serverless - covering execution, privilege escalation, persistence, lateral movement, and evasion
- Analyze telemetry from AWS CloudTrail, GCP Audit Logs, Azure Activity Logs, and runtime/sensor data to investigate threats and translate findings into detection logic
- Partner with sensor and detection engineers on feasibility, coverage, and signal quality
- Run threat simulations and attack emulation to validate coverage and surface gaps
- Track emerging threats and CVEs across AWS, Azure, and GCP, feeding them into detection priorities
- Produce externally publishable research - blog posts, whitepapers, threat reports - and represent Orca at conferences and webinars
- Mentor our junior researcher in detection engineering, runtime analysis, and research rigor
About you:
- 4+ years in security research, threat research, or detection engineering, ideally in cloud/cloud-native environments
- Strong Linux and cloud infrastructure foundation, with an attacker-oriented mindset
- Deep familiarity with attacker TTPs (MITRE ATT&CK for Cloud/Containers)
- Hands-on experience turning runtime, host, and network security events into detections
- Proficiency in Python (Go a plus)
- Track record of, or clear appetite for, mentoring
- Strong written and spoken English, with the ability to explain complex topics clearly
Nice to have:
- eBPF/runtime sensor experience, Linux kernel internals
- Kubernetes/container, API, or application security background
- Offensive security, red teaming, or vulnerability research experience
- Large-scale telemetry analysis (SQL/Elastic)
- AI/ML-assisted security research experience
- Conference speaking, published research, CVEs, or open-source contributions
Similar jobs
Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned u…
Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned u…
Est. 240,000 USD
Location: East or Central, US (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickl…
Est. 120,000 USD
Location: East Coast, US (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly ear…
Location: India, Bangalore (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly e…
Location: India, Delhi (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earne…
Est. 72,250 USD
Location: East Coast, US (Remote) or Central, US (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always a…
Est. 185,000 USD
Location: East Coast, US (Remote) Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly ear…
Est. 155,000 USD
Location: East Coast, US (Remote) or Austin, TX Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, h…
Location: Australia (Melbourne or Sydney).* Fully remote. Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always a…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
*Fully remote from Singapore **English and Mandarin required Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to alway…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 60,000 USD
Location: Austin, TX Big Ideas. Real People. At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicor…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
ScaleOps is redefining autonomous cloud and AI infrastructure. We're on a mission to free DevOps and platform engineers from manual resource management so they can focus on innovation, not tuning resources. The results:…
Est. 210,000 USD
*Position is IN OFFICE at our Santa Clara, CA (San Francisco Bay Area) office About Us Orkes is the operating system for AI agents and workflows, providing the battle-tested infrastructure required to move AI from simple…
We offer the industry’s only platform that fuses customer identity and anti-fraud solutions – customer identity management, identity verification, and fraud prevention. We sell to industries with large, consumer-facing b…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Est. 160,000 USD
About SecurityScorecard: SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Ale…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 120,000 USD
COMPANY OVERVIEW ThreatLocker® is a leader in Zero Trust cybersecurity, delivering a unified platform that provides enterprise-grade protection across users, devices, and applications. The ThreatLocker® Platform combines…
Salt Security is the original API Security vendor pioneering the market as the first vendor in 2018. Since then we have exhibited hyper-growth in a number of customers, threats stopped, and revenue. We saw API security a…
Arkose Labs is on a mission to create an online environment where all consumers are protected from spam and abuse. As a Fast Company 2025 Best Workplace for Innovators, we provide a proactive fraud deterrence platform, A…