Cloud Security Detection Analyst

Big Ideas. Real People.

At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So, if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod.

Highlights

• High growth: In just six years, we’ve reached milestones that take other companies a decade or more. We’ve doubled our employee count, tripled our customer count, and rapidly expanded our product capabilities.
• Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.
• Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.
• Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.

About the Role

The Orca Sensor team is expanding! We’re looking for a curious, motivated Cloud Security Detection Analyst to help strengthen Orca’s runtime security capabilities and protect our customers during their most critical moments.

Our sensor delivers deep runtime visibility across cloud environments, spanning processes, syscalls, network activity, operating systems, and containerized workloads. As a Detection Analyst, you will examine this data at scale, refine detections, surface suspicious behaviors, and collaborate with the research team to continuously improve our security outcomes.

What you’ll do

• Examine runtime events and security findings collected by the Orca Sensor to identify patterns, anomalies, and potential threats.
• Tune detection logic to reduce false positives and improve accuracy.
• Investigate alerts from real customer environments and propose improvements.
• Work closely with the research team to refine existing detections and provide insight for new ones.
• Partner closely with field teams and product managers - managing requests, sharing findings, and keeping everyone aligned.
• Produce short internal or external updates on relevant security trends or incidents.
• Use Elasticsearch to explore detection data and visualize trends.
• Contribute to detection automation and validation workflows (Python/Bash/Go/GitHub Actions).

About you

• BSc with expertise in cybersecurity, or equivalent cybersecurity/detection experience
• Good understanding of OS internals (Linux/Windows), process and network behavior
• Proven ability to conduct deep analysis, document findings, and propose solutions
• Comfortable with some of the programming/scripting languages (Python, Bash, or similar)
• Fast learner, self-starter, team player with a “can-do” attitude.
• Excellent spoken and written English

Nice to have

• Familiarity with security tools for runtime visibility or detection
• Prior exposure to threat detection or security operations (SOC analysis)
• Experience with Cloud-Native architectures (AWS/Azure/GCP) and Kubernetes
• Basic malware analysis knowledge
• Experience with ElasticSearch or similar big data analytics tools
• Familiarity with AI tools and frameworks (e.g. MCP, AI-driven automations)

Why join the Orca sensor team?

The Sensor team powers Orca’s real time security insights, connecting deep runtime activity with cloud context to deliver high impact detections. Your work will help customers mitigate incidents faster and improve their security posture where it matters most, in production. You’ll join a team of passionate cloud and security professionals building the next generation of runtime protection with innovation, collaboration, and real customer impact at the center.