# Data Platform Team - Orca Security

[Orcasecurity](https://gurify.com/jobs?q=Orcasecurity) · Tel Aviv-Yafo, Israel · Posted 6 days ago

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/orcasecurity/jobs/6240515004)

## Job description

### Big Ideas. Real People.

At Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you’re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod. We’re looking for driven and talented people like you to join our R&D team and our mission to change the future of cloud security.

### Ready to dive in and swim with our pod?

### Highlights:

- High-growth: Over the past seven years, we’ve consistently achieved milestones that take other companies a decade or more. During this time, we’ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.

- Disruptive innovation: Our founders saw that traditional security didn’t work for the cloud, so they set out to carve a new path. We’re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.

- Well-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We’re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.

- Respectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.

### About the Role:

- The Serving Layer team owns the data infrastructure behind Orca's platform UI and API. Every asset, alert, and query a customer sees is served from it, at high concurrency and with latency budgets measured in milliseconds. On the write side, the team ingests continuously from across the platform; on the read side, it serves the product.

- We're looking for a deeply hands-on engineer to own performance, data modeling, and operational reliability across that stack - someone who can move between a query execution plan, a Flink job's parallelism, and a Kubernetes operator upgrade in the same week.

- This is a senior individual-contributor role. You'll set technical direction for how our data is modeled, stored, and served, and you'll be the person others come to when something is slow and nobody knows why.

### Our stack:

- Serving: SingleStore, self-managed on Kubernetes (operator-driven), plus Trino for analytical access

- Streaming and ingestion: Kafka / Amazon MSK, Apache Flink, Spark Structured Streaming, CDC pipelines

- Lakehouse: Apache Iceberg on S3, Parquet, custom compaction

- Infrastructure: AWS, EKS, Terraform, Helm, multi-region

- Languages: Python, Go, and a lot of SQL

### What You'll Do:

- Own end-to-end query performance: plan analysis, shard-key and index design, statistics, join strategy, and driving down p99 latency under real concurrency

- Design and evolve the physical data models - sharding, partitioning, sort keys, retention - that serve product queries at scale, and the table layouts that make lakehouse reads fast

- Run SingleStore in production on Kubernetes: capacity and node topology, operator-driven upgrades and node refreshes, backup and restore, blast-radius and failure design

- Tune the ingestion path end to end: Kafka topic design and consumer performance, Flink and Spark job parallelism, checkpointing, backpressure, and data freshness

- Build the observability that catches performance regressions before customers do - query-level metrics, slow-query workflows, load-test harnesses

- Partner with product and platform teams on schema and query contracts, and push back on designs that won't hold at scale

### What You Bring:

- 7+ years in backend, data, or infrastructure engineering, including 3+ years focused on distributed database or analytical query performance

- Real depth in database internals: reading and reshaping execution plans, understanding how sharding, partitioning, indexing, and join distribution drive latency, and diagnosing skew, spills, lock contention, and memory pressure in production

- Hands-on experience with a distributed OLAP/HTAP or MPP engine - SingleStore, ClickHouse, Druid, Pinot, Trino/Presto, Snowflake, Redshift, Vertica, or similar

- Strong data modeling judgment for read-heavy, latency-sensitive serving workloads, not only batch or warehouse modeling

- Production experience with distributed streaming- Kafka and at least one of Flink or Spark Structured Streaming - including performance and throughput tuning, not just wiring jobs together

- Working knowledge of a table format (Iceberg, Delta, Hudi) and what partitioning, file sizing, and compaction do to query performance

- Kubernetes fluency in production: operators and StatefulSets, resource management, persistent storage, safely upgrading stateful workloads

- Expert SQL, plus Python or Go

- Infrastructure-as-code and cloud operations (Terraform, Helm, AWS)

- Proven ownership of production systems: on-call, incident investigation, capacity planning

### Bonus Points if You Have:

- Direct SingleStore experience, especially self-managed on Kubernetes

- Iceberg at scale: compaction strategy, metadata growth, maintenance jobs

- Multi-region, multi-tenant SaaS

- Experience introducing performance engineering practice to a team - benchmarks, regression gates, load testing as part of CI

- Cloud security or CNAPP domain background

#LI-ORCA

**Live in Orcasecurity’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- OR [Senior Product Manager | Orca Security](https://gurify.com/job/senior-product-manager-orca-security-at-orcasecurity-22492c00857a) Orcasecurity · Tel Aviv-Yafo, Israel · 5 days ago
- TE [Charm Security- Senior Backend Engineer – Platform](https://gurify.com/job/charm-security-senior-backend-engineer-platform-at-team8-02db73e71c38) Team8 · Tel Aviv-Yafo, Israel · 2 weeks ago
- ZE [AI Agent Security | Director of Platform Engineering](https://gurify.com/job/ai-agent-security-director-of-platform-engineering-at-zenity-e98cbd4b8c4f) Zenity · Tel Aviv-Jaffa, Israel · 3 weeks ago
- SI [Product Security Engineer](https://gurify.com/job/product-security-engineer-at-silverfort-ab7ac11fa949) Silverfort · Tel Aviv-Yafo, Israel · 6 days ago
- ME [Network & Security Engineer](https://gurify.com/job/network-security-engineer-at-mergroup-f9c27f90c64d) Mergroup · Or Yehuda, Israel · last week
- WI [Security Operations Specialist - Careers - Wiz](https://gurify.com/job/security-operations-specialist-careers-wiz-at-wizinc-0c7d941fe75a) Wizinc · Tel Aviv · last week

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Data Platform Team - Orca Security","description":"\u003Ch3\u003EBig Ideas. Real People.\u003C/h3\u003E\u003Cp\u003EAt Orca, in the right environment and with the right team, talent has no boundaries. This team spirit, together with our drive to always aim high, has quickly earned us unicorn status and turned us into a global cloud security innovation leader. So if you\u2019re ready to join an amazing team of people who inspire each other every day, now is the time to find your place in our pod. We\u2019re looking for driven and talented people like you to join our R\u0026amp;D team and our mission to change the future of cloud security.\u003C/p\u003E\u003Ch3\u003EReady to dive in and swim with our pod?\u003C/h3\u003E\u003Ch3\u003EHighlights:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHigh-growth: Over the past seven years, we\u2019ve consistently achieved milestones that take other companies a decade or more. During this time, we\u2019ve significantly grown our employee base, expanded our customer reach, and rapidly advanced our product capabilities.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDisruptive innovation: Our founders saw that traditional security didn\u2019t work for the cloud, so they set out to carve a new path. We\u2019re relentless pioneers who invented agentless technology and continue to be the most comprehensive and innovative cloud security company.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWell-capitalized: With a valuation of $1.8 billion, Orca is a cybersecurity unicorn dominating the cloud security space. We\u2019re backed by an impressive team of investors such as Capital G, ICONIQ, GGV, and SVCI, a syndicate of CISOs who invest their own money after conducting their due diligence.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERespectful and transparent culture: Our executives pride themselves on being accessible to everyone and believe in sharing knowledge with the employees. Each employee has a place in shaping the future of our industry.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EAbout the Role:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EThe Serving Layer team owns the data infrastructure behind Orca\u0026#39;s platform UI and API. Every asset, alert, and query a customer sees is served from it, at high concurrency and with latency budgets measured in milliseconds. On the write side, the team ingests continuously from across the platform; on the read side, it serves the product.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe\u0026#39;re looking for a deeply hands-on engineer to own performance, data modeling, and operational reliability across that stack - someone who can move between a query execution plan, a Flink job\u0026#39;s parallelism, and a Kubernetes operator upgrade in the same week.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EThis is a senior individual-contributor role. You\u0026#39;ll set technical direction for how our data is modeled, stored, and served, and you\u0026#39;ll be the person others come to when something is slow and nobody knows why.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EOur stack:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EServing: SingleStore, self-managed on Kubernetes (operator-driven), plus Trino for analytical access\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStreaming and ingestion: Kafka / Amazon MSK, Apache Flink, Spark Structured Streaming, CDC pipelines\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELakehouse: Apache Iceberg on S3, Parquet, custom compaction\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInfrastructure: AWS, EKS, Terraform, Helm, multi-region\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELanguages: Python, Go, and a lot of SQL\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat You\u0026#39;ll Do:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EOwn end-to-end query performance: plan analysis, shard-key and index design, statistics, join strategy, and driving down p99 latency under real concurrency\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDesign and evolve the physical data models - sharding, partitioning, sort keys, retention - that serve product queries at scale, and the table layouts that make lakehouse reads fast\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERun SingleStore in production on Kubernetes: capacity and node topology, operator-driven upgrades and node refreshes, backup and restore, blast-radius and failure design\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETune the ingestion path end to end: Kafka topic design and consumer performance, Flink and Spark job parallelism, checkpointing, backpressure, and data freshness\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild the observability that catches performance regressions before customers do - query-level metrics, slow-query workflows, load-test harnesses\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with product and platform teams on schema and query contracts, and push back on designs that won\u0026#39;t hold at scale\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat You Bring:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E7\u002B years in backend, data, or infrastructure engineering, including 3\u002B years focused on distributed database or analytical query performance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EReal depth in database internals: reading and reshaping execution plans, understanding how sharding, partitioning, indexing, and join distribution drive latency, and diagnosing skew, spills, lock contention, and memory pressure in production\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience with a distributed OLAP/HTAP or MPP engine - SingleStore, ClickHouse, Druid, Pinot, Trino/Presto, Snowflake, Redshift, Vertica, or similar\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong data modeling judgment for read-heavy, latency-sensitive serving workloads, not only batch or warehouse modeling\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProduction experience with distributed streaming- Kafka and at least one of Flink or Spark Structured Streaming - including performance and throughput tuning, not just wiring jobs together\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of a table format (Iceberg, Delta, Hudi) and what partitioning, file sizing, and compaction do to query performance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EKubernetes fluency in production: operators and StatefulSets, resource management, persistent storage, safely upgrading stateful workloads\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExpert SQL, plus Python or Go\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInfrastructure-as-code and cloud operations (Terraform, Helm, AWS)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProven ownership of production systems: on-call, incident investigation, capacity planning\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EBonus Points if You Have:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EDirect SingleStore experience, especially self-managed on Kubernetes\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIceberg at scale: compaction strategy, metadata growth, maintenance jobs\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMulti-region, multi-tenant SaaS\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience introducing performance engineering practice to a team - benchmarks, regression gates, load testing as part of CI\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECloud security or CNAPP domain background\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E#LI-ORCA\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"data-platform-team-orca-security-at-orcasecurity-ef4755be330d"},"url":"https://gurify.com/job/data-platform-team-orca-security-at-orcasecurity-ef4755be330d","datePosted":"2026-11-04","validThrough":"2026-12-25T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Orcasecurity","sameAs":"https://job-boards.greenhouse.io/orcasecurity"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Tel Aviv-Yafo"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"Data Platform Team - Orca Security","item":"https://gurify.com/job/data-platform-team-orca-security-at-orcasecurity-ef4755be330d"}]}
```