Security Engineer | Generalist

📋 Job Overview

Arq is seeking a Security Engineer | Generalist to join our team. This is a full-time position with hybrid work options available in London, Krakow, Mexico City, and New York.

🏢 About Arq

Arq is a fintech company focused on building the best fintech app in Latin America. We are looking for talented individuals to help us achieve our mission.

🎯 The Role

As a Security Engineer | Generalist, you will be responsible for a wide range of security tasks, including building and improving SIEM detection rules, alert pipelines, and automated response playbooks.

✅ Key Responsibilities

• Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
• Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
• Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
• Conduct cloud security assessments across AWS and Kubernetes environments
• Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
• Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure
• Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding

📌 Required Qualifications

• 4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
• 2+ years at a regulated fintech/bank/payment company
• Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
• Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
• Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
• Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM)
• Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails
• Experience running or contributing to vendor security assessments and third-party due diligence
• Strong written and verbal communication
• Business fluent in English

🎁 Benefits

• Competitive salary and benefits
• Stock options, so you own part of what you build
• Discretionary performance bonus
• The latest tools and technology
• A world-class team that will challenge and grow your skills
• The opportunity to help build the best fintech app in Latin America
• Office Policy: 3-4 days a week in-office

🛂 Visa & Eligibility

Not specified