> Markdown version of [/jobs/ext/2704163-security-engineer](https://www.wearedevelopers.com/jobs/ext/2704163-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Orkes Inc.
- **Location:** Santa Clara, CA, United States
- **Experience:** Expert
- **Salary:** $180,000.0 - $240,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cyber Security, Computer Programming, Continuous Integration, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Systems Development Life Cycle, Role-Based Access Control, Multi-Cloud, Kubernetes, Production Code, Virtual Agents, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/senior-security-engineer-orkes-company-8906407

## About the Role

* 7+ years of experience
 * Ships fixes and platform guardrails in production code (Java/Python/TS) - a doer, not just an identifier
 * Owns the security roadmap - turns the threat landscape into a prioritized, roadmapped program for the team
 * First responder for Penetration testing, Security Audits, and CVEs
 * Multi-cloud security architecture (AWS/Azure/GCP + self-hosted) - IAM, network, KMS, tenant isolation
 * Designs RBAC/authZ as a system across product and platform
 * Experience with Security testing and analyzing in CI/CD (SAST/DAST/SCA as a paved road)
 * Threat models real systems and turns findings into strategy
 * AI-coding experience - look for those who prescribe/tell AI exactly what to do vs those who ask AI to make judgment calls and decisions

Nice-to-haves: OSCP/CKS; K8s (Kubernetes) security; compliance (SOC 2, ISO 27001, FedRAMP); detection engineering, Red-team experience

## Description

As a Senior Security Engineer at Orkes, you will work at the frontier of agentic workflow development, building the security foundation that defines how enterprises safely workflows with AI agent interactions. You will own the security roadmap for our multi-cloud control plane and customer-hosted deployments, architecting critical guardrails, ranging from IAM and RBAC to secure agent-tool integration, that make complex workflows production-ready. This is a unique opportunity to build mission-critical infrastructure ensuring security is not just a checkbox, but fully integrated into our SDLC and cloud control plane so that our customers can confidently automate their most sensitive business processes.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [The Open-source Java SDK for Multi-Cloud Development - Sandeep Pal](https://www.wearedevelopers.com/videos/2113-the-open-source-java-sdk-for-multi-cloud-development-sandeep-pal)
- [Guiding Agentic AI with Vue](https://www.wearedevelopers.com/videos/2033-guiding-agentic-ai-with-vue)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)