{"id":3538956,"url":"https://alion.io/job/arq-senior-detection-engineer-secops","title":"Senior Detection Engineer | SecOps","company":{"id":450345,"name":"ARQ","domain":"arqfinance.com","url":"https://alion.io/company/arq-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":6,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","New York, United States","Poland"],"countries":["GB","US","PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":88000,"max_usd":161000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Datadog","optional":false},{"name":"Datadog Cloud Security","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"Google SecOps","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Agentic Workflows","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Claude","optional":true},{"name":"Cloudflare","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Kubernetes","optional":true},{"name":"OpenAI","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-30T14:50:32Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-10-31T17:41:40Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"What we're looking for\nYou'll own detection engineering and help shape how ARQ detects and responds to threats. From bringing new log sources into ARQ’s SIEM to writing, testing and tuning detections, you'll be responsible for making sure our coverage works when it matters.\nWe're looking for someone who combines hands-on detection experience with an engineering mindset. You'll work directly with our CISO and a small global security team, with the autonomy to prioritise gaps and build practical solutions. Automation is central to how we work: you'll build and run AI agents that support rule development, validation, alert triage and threat hunting, with you reviewing and approving their output.\nWhat you'll do\nOwn detection engineering end to end in Datadog Cloud SIEM: identify missing log sources, prioritise onboarding and build reliable detection coverage.\n\nWrite, test and tune detection rules, reducing false positives while keeping meaningful threats visible.\n\nMap coverage to MITRE ATT&CK and validate it by reproducing attacker activity.\n\nManage detections as code, using version control, CI pipelines and code review.\n\nBuild and run automation and AI agents for rule authoring, detection validation, coverage mapping, alert triage and threat hunting.\n\nInvestigate security incidents, including triage, scoping, evidence collection and clear incident write-ups.\n\nHelp develop automated response and containment capabilities.\n\nTrack and communicate detection coverage, validation results and response performance to security leadership.\n\nWhat you'll need\n5+ years in security, including 3+ years writing and owning detections in production.\n\nHands-on experience with a cloud SIEM and its query language, such as Datadog Cloud SIEM, Splunk, Elastic, Google SecOps.\n\nDeep knowledge of AWS logs, particularly CloudTrail, IAM and IAM Identity Center, alongside experience with SaaS audit logs such as Google Workspace, GitHub, GitLab or Okta.\n\nExperience managing detections as code using Terraform, Git, CI pipelines and code review.\n\nPractical experience mapping detections to MITRE ATT&CK and testing rules by reproducing attacks with tools such as Atomic Red Team or Stratus Red Team.\n\nPython skills for automation, log analysis and security tooling, with a record of shipping automation or AI agents that others use.\n\nHands-on incident response experience, from investigating alerts to documenting findings and remediation.\n\nThe ability to work independently, prioritise effectively and own outcomes in a small team without a dedicated SOC behind you.\n\nStrong written and verbal communication in English.\n\nNice to have\nFamiliarity with CrowdStrike Falcon, Datadog SIEM, Cloudflare Zero Trust or WAF.\n\nExperience working with Kubernetes (EKS) audit logs.\n\nThreat hunting, red team or purple team experience.\n\nExperience building agentic workflows using Claude or OpenAI.\n\nA background in fintech, payments or crypto, with exposure to SOC 2 or PCI DSS.\n\nSpanish or Portuguese language skills.\n\nBenefits\nCompetitive salary and benefits\n\nStock options, so you own part of what you build\n\nDiscretionary performance bonus\n\nThe latest tools and technology\n\nA world-class team that will challenge and grow your skills\n\nThe opportunity to help build the best fintech app in Latin America\n\nOffice Policy: 3-4 days a week in-office","description_format":"text","description_chars":3336,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Portuguese","level":"All levels","optional":true},{"language":"Spanish","level":"All levels","optional":true},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Stablecoins","Digital Banks & Neobanks","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-10-30T18:38:43Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:2","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/arq-senior-detection-engineer-secops","json_url":"https://alion.io/job/arq-senior-detection-engineer-secops.json","meta":{"generated_at":"2026-10-31T20:26:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32138,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450345},"rest":"https://alion.io/mcp/rest/get_company?id=450345"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Farq-senior-detection-engineer-secops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Farq-senior-detection-engineer-secops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Farq-senior-detection-engineer-secops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/arq-senior-detection-engineer-secops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Farq-senior-detection-engineer-secops"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3538956}},{"tool":"search_jobs","arguments":{"company":"arqfinance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3538956},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}