.svg)
Lead Cloud Runtime Security Engineer — Sensor
About the team
Orca Security is a cybersecurity startup and cloud innovation leader. Founded in 2019 in Israel by former Check Point managers, it raised $630+ million and became a 'unicorn' in 2021.
Orca delivers a modern, agentless cloud security platform trusted by some of the world’s largest organizations. We provide deep visibility into risks across AWS, Azure, GCP, Kubernetes, and more — surfacing misconfigurations, vulnerabilities, and active threats. Our unified platform doesn’t just report problems; it prioritizes what matters based on real risk context like exposure, privilege, and blast radius.
Cloud teams love Orca because it’s fast to deploy, easy to maintain, and scales effortlessly with real-world infrastructure.
About the role
We're the team behind Orca Sensor – a high-performance, lightweight runtime component that brings real-time visibility and protection to modern cloud workloads, including containers, VMs, and serverless environments.
As a senior developer in this team, you’ll take a lead technical role in the evolution of our sensor, with a focus on building robust, low-overhead, production-grade systems that operate deep within the operating system. But this role goes beyond engineering – you will also partner closely with security researchers to embed cutting-edge detection logic into the runtime, helping the platform identify and stop sophisticated threats in cloud-native environments.
This is a unique opportunity for someone who thrives in both deep system-level programming and practical cloud security research, and wants to define the future of agentless detection.
While we're based in Warsaw and prefer local candidates, we're open to remote collaboration from anywhere in Poland for the right fit.
[01]
Responsibilities
- Build and maintain core components of the Orca Sensor runtime in Go, C++ and eBPF, with a focus on performance, stability, and minimal footprint
- Lead design efforts for new telemetry and detection features using technologies like eBPF, syscall instrumentation, and OS-level signal processing
- Bridge engineering and research by partnering with security researchers to translate real-world attack techniques and threat intelligence into sensor capabilities
- Investigate complex runtime behaviors, system internals, and cloud-native workloads to uncover novel detection opportunities
- Contribute to architectural decisions, mentor teammates, and help set best practices around secure, scalable systems
- Design software that is cloud-native from the ground up, with microservices, containerization, and distributed environments in mind
- Collaborate with product, cloud security researchers, and platform teams to align sensor capabilities with broader detection goals
- Develop expertise in cloud infrastructure and threats across AWS, Azure, and GCP, and help evolve how Orca detects them
Requirements
- Bachelor's degree in Computer Science, Engineering, or relevant field — or equivalent practical experience
- 6+ years of software engineering experience, particularly in low-level, performance-sensitive, Linux-based systems
- Proficiency in Go, or deep experience in C/C++/Rust with a willingness to master Go
- Strong grasp of software fundamentals: concurrency, synchronization, memory management, data structures, and OS internals
- Experience with microservice architectures, cloud-native patterns, and distributed systems
- Working familiarity with cloud platforms (AWS, GCP, Azure) and how workloads behave in production environments
- Hands-on experience with eBPF, syscall tracing, or runtime telemetry frameworks — strong plus
- Familiarity with Kubernetes, container internals, and Linux process isolation mechanisms — advantage
- Demonstrated curiosity and initiative in the cloud security or threat detection domain — highly valued
- Comfortable with rapid experimentation, research collaboration, and delivering production-ready features
- Advantage — experience with in Malware analysis and reverse engineering (IDA Pro, Ghidra, Binary Ninja or similar)
- Advantage — proven experience in Vulnerability Research
Benefits
- Work in a highly professional team. Informal and friendly atmosphere in the team
- Paid vacation — 20 business days per year, 100% sick leave payment
- Equipment provision
- Partially compensated educational costs (for courses, certifications, professional events, etc.)
- Legal and Accounting support in Poland
- Ability to work from our comfortable office in Warsaw at Prosta 51
- 5 sick days per year
- Medical insurance (after the end of the probationary period)
- English and Polish classes 2 times a week (online)
- Bright and memorable corporate life: corporate parties, gifts to employees on significant dates
Join us
To be considered for this position, you must have Polish citizenship, a D-type work visa, or a residence permit. Thank you!
Contribute to our growth
Know someone perfect for this role? Let us know about them. We have a referral program to recognize your support.
.png)