What you'll do
-
Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
-
Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
-
Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
-
Conduct cloud security assessments across AWS and Kubernetes environments
-
Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
-
Assess and secure AI/agentic workflows across the company β reviewing prompts, preventing destructive actions, and controlling data exposure
-
Establish and run the vendor security assessment process β building a scalable due diligence framework for third-party onboarding
What you'll need
-
4β7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
-
2+ years at a regulated fintech/bank/payment company
-
Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
-
Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
-
Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
-
Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM)
-
Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails
-
Experience running or contributing to vendor security assessments and third-party due diligence
-
Strong written and verbal communication
-
Business fluent in English
Benefits
-
Competitive salary and benefits
-
Stock options, so you own part of what you build
-
Discretionary performance bonus
-
The latest tools and technology
-
A world-class team that will challenge and grow your skills
-
The opportunity to help build the best fintech app in Latin America
-
Office Policy: 3-4 days a week in-office
Security Engineer | Generalist in London employer: ARQ
ARQ is an exceptional employer located in the vibrant city of London, offering a dynamic work culture that fosters innovation and collaboration. As a Senior Backend Engineer, you'll have the opportunity to work on cutting-edge fintech projects while benefiting from a strong focus on professional development and growth. With a commitment to maintainable code and modern practices like TDD and CI/CD, ARQ provides a rewarding environment for those looking to make a meaningful impact in the financial technology space.