9 hours ago
London, United KingdomSenior
Responsibilities
- Build automated security harnesses using continuous red-team and blue-team loops to identify, triage, and help fix vulnerabilities.
- Own vulnerability management, including severity classification, response targets, patching, dependency scanning, image scanning, and issue closure.
- Threat-model and secure AI agents handling untrusted documents, emails, web content, tools, and sandboxes, including defenses against prompt injection and data exfiltration.
- Review authentication, tenant isolation, secrets, and data-handling designs and convert recurring findings into automated checks.
- Lead technical security incident response, including containment, investigation, remediation, breach playbooks, and post-incident reviews.
- Evaluate and operate cloud security, detection, alerting, and logging tooling across AWS and Azure.
- Run red-team exercises, manage external penetration testers, and conduct breach drills with engineering.
- Remediate penetration-test and security-research findings, support responsible disclosure, and maintain technical evidence for SOC 2 and ISO 27001 controls.
- Communicate security findings, remediation progress, and residual risk to leadership and engineering with clear recommendations.
Requirements
- Deep hands-on security engineering experience owning security for a cloud-native product or platform.
- Strong AWS security experience, including IAM, network design, KMS, GuardDuty, Security Hub, and CloudTrail.
- Experience leading real security incidents through containment, investigation, communication, and follow-up.
- Understanding of OWASP-class application vulnerabilities and AI-agent risks such as prompt injection and over-broad tool access.
- Experience using AI agents to find, triage, or fix security issues and an automation-first approach to security work.
- Ability to assess customer and business risk, help engineering teams ship securely, and influence teams through clear communication.
- Ability to work independently, set priorities, build a security program, and determine when outside support is needed.
- Ability to explain security risks effectively to engineers, lawyers, and board members.
- Experience may come from security engineering, product security, application security, or hands-on security consulting.
- Experience securing LLM or agentic AI applications, or researching prompt injection and AI-specific threats, is preferred.
- Harness engineering experience involving tooling, evaluation loops, and guardrails for AI agents is preferred.
- Hands-on SOC 2 and ISO 27001 audit experience is preferred.
- Experience with Azure, Kubernetes, container security, or sandboxed code execution is preferred.
- Familiarity with identity and SSO providers such as WorkOS or Okta is preferred.
- Experience in legal, financial, or other regulated industries is preferred.
Benefits
- The role offers broad ownership as Orbital’s first in-house product security engineer.
- Orbital supports a diverse and inclusive workplace and welcomes candidates from traditionally underrepresented groups in tech.
- All employees complete background screening before starting.
- Employees are expected to follow security policies, complete regular awareness training, and handle sensitive data in line with ISO 27001 standards.
Tech Stack
Categories
About Orbital
Orbital builds a B2B payments platform that lets enterprises receive, exchange, and settle funds across major stablecoins and traditional currencies. Its API, web app, and OTC desk provide multi-currency vIBAN accounts, stablecoin wallets, FX in 80+ currencies, digital-asset custody, and crypto‑commerce C2B payments; revenue comes from account, payment, and FX fees. Founded in 2017 and headquartered in Gibraltar, Orbital is the trading name of the Pay Perform group.