Senior Security Engineer (Contract) | Greenfield AWS Product | SOC 2

🚀 We’re on a mission to make real estate transactions smarter, faster, and friction-free. 🏢 Real estate is the world’s largest asset class, yet the legal processes and tools behind it remain slow, manual, and underinvested. Lawyers must review dense documents line by line and piece together information across silos, all while clients demand faster, more transparent due diligence. 🤖 That's where we come in. Orbital Copilot is the AI assistant built exclusively for commercial real estate law. Developed with former practicing real estate lawyers, it accelerates complex due diligence by up to 70% while delivering legal-grade precision. 💰 We’ve just raised a $60m Series B to accelerate our UK/US expansion. 🤝 We're trusted by leading firms like Goodwin and BCLP to remove the busywork so legal teams can focus on what they do best: applying sharp legal judgment, delivering standout client service, and getting deals over the line faster. 💡 Working at Orbital means joining a team that's reimagining how real estate transactions get done - moving fast, working collaboratively, and giving people the ownership to make a real impact from day one. The role - We are looking for a Security Engineer (Contract) to be the internal security lead on our Greenfield Product. You will have full access to source code, cloud infrastructure, and configurations, everything an external pen tester cannot see. - Your job is to ensure the product is enterprise-ready before a customer goes anywhere near it. - You will work alongside the Greenfield Product hardening squad: head of engineering, platform engineers, a developer, and a QA engineer. You will also act as day-to-day counterpart to our external security and pen test partners. - This is a hands-on engineering role, not an advisory one. You will be building and implementing controls, not writing recommendations for someone else to action. What this role is not - We are not looking for a consultant who produces reports and hands them to an engineering team. - We are not looking for someone whose SOC 2 experience is limited to policy writing or questionnaire completion. - And we are not looking for someone who needs close direction or a large security team around them to operate. - The right person has done this before, moves quickly, and can own the security posture of a greenfield AWS product independently. What you will own - AWS security posture from the ground up: account structure, IAM, RBAC, logging, and monitoring within the AWS Well-Architected Framework - SOC 2 Type II controls and evidence for the Greenfield Product on AWS, ensuring the new platform meets the same compliance bar as our existing certified platform - Application-level hardening: authentication (JumpCloud SSO/OIDC), API rate limiting, web security headers, CSRF, CORS, and file-upload validation - AI and agentic security: hardening a sandboxed agent environment including shell execution controls, SSRF/DNS rebinding prevention, prompt injection defences, and tool-use guardrails - Penetration test management: working alongside our external pen test firm (first engagement scoped for early July), triaging findings, and closing them rapidly - Continuous security validation: putting automated processes in place so that security posture does not erode after this engagement ends - Data residency: ensuring US and UK data residency requirements are met from the start given our law firm customer base - Security status reporting: concise updates to the lead and wider leadership You should apply if - You have deep, hands-on security engineering experience: you build and implement controls, you do not just advise - You have strong AWS security knowledge: IAM, account structure, Well-Architected Framework, CloudTrail, GuardDuty, Config, and Security Hub - You have driven a real SOC 2 Type II engagement: controls, evidence collection, and audit preparation, not just policy documentation - You have application security experience: auth, RBAC,...