JobHabor
Menu

Security Engineer | Generalist

ARQ · London · Hybrid

  • Financial Services & Banking
  • 51–200 employees
  • New York, NY

Mixed hiring record · median 11 days open

100100

Hiring signal

Actively hiring

Posted today · still listed on the employer's own board · How we score

All reasons
  • 41% of this employer's openings are over 60 days old

In its favour

  • Posted today
  • Still listed on the employer's own board

Did you apply?

Security Engineer | Generalist at ARQ. We’ll keep it in your applied jobs, so you can see it later and be warned before applying to the same employer twice.

What you'll do

  • Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
  • Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
  • Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
  • Conduct cloud security assessments across AWS and Kubernetes environments
  • Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
  • Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure
  • Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding

What you'll need

  • 4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
  • 2+ years at a regulated fintech/bank/payment company
  • Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
  • Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
  • Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
  • Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM)
  • Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails
  • Experience running or contributing to vendor security assessments and third-party due diligence
  • Strong written and verbal communication
  • Business fluent in English

Benefits

  • Competitive salary and benefits
  • Stock options, so you own part of what you build
  • Discretionary performance bonus
  • The latest tools and technology
  • A world-class team that will challenge and grow your skills
  • The opportunity to help build the best fintech app in Latin America
  • Office Policy: 3-4 days a week in-office

Skills

More jobs at ARQ

All 18

Similar roles