Join ARQ as a Security Engineer to build and improve security processes in a high-growth fintech environment.
Posted by employer 2 days ago
First seen on Joblaze 1 day ago
Last verified on the company career page 1 day ago
Skills & Technologies
What you'll build
- Build and improve SIEM detection rules
- Contribute to incident response readiness
- Support DLP strategy and data protection controls
- Conduct cloud security assessments
- Drive application security initiatives
Must have
- 4–7 years in cyber security
- 2+ years at a regulated fintech/bank/payment company
- Hands-on experience with cloud infrastructure security
- Working knowledge of SIEM platforms
- Familiarity with application security practices
- Experience with endpoint security tooling
Nice to have
- Experience running or contributing to vendor security assessments
- Ability to assess and secure emerging AI/agentic tooling
- Strong written and verbal communication
- Business fluent in English
Practical constraints
- 3-4 days a week in-office
AI in the day-to-day
Assess and secure AI/agentic workflows across the company.
Requirements
- Experience
- 4–7 years
Not disclosed in this posting: compensation, visa sponsorship.
Benefits
Joblaze summary
In this role, the Security Engineer will focus on enhancing security measures through the development of detection rules, incident response protocols, and cloud security assessments. Key skills include hands-on experience with AWS and Kubernetes, familiarity with SIEM platforms, and a solid understanding of application security practices. This position is ideal for someone with 4-7 years of cybersecurity experience, particularly in a fintech environment, who has a track record of building security functions from the ground up. The team is positioned within a high-growth company, emphasizing a collaborative approach to security challenges.
Joblaze insights
- Listed yesterday — first seen on Joblaze November 8, 2026. Last confirmed on ARQ's careers page November 8, 2026.
Quick facts
- Is the Security Engineer | Generalist role remote?
- It's hybrid — ARQ expects some on-site time in London, United Kingdom.
- How much experience is required?
- 4–7 years of relevant experience for this Security Engineer | Generalist role.
- Where is the role based?
- ARQ is hiring for this position in London, United Kingdom.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: API, AWS, CloudFlare, CrowdStrike, Datadog, Google Workspace.
- What seniority level is this role?
- ARQ targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Security Engineer | Generalist role at ARQ.
From the original posting
What you'll do
Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
Conduct cloud security assessments across AWS and Kubernetes environments
Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure
Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding
What you'll need
4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
2+ years at a regulated fintech/bank/payment company
Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM)
Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails
Experience running or contributing to vendor security assessments and third-party due diligence
Strong written and verbal communication
Business fluent in English
Benefits
Competitive salary and benefits
Discretionary performance bonus
The latest tools and technology
Office Policy: 3-4 days a week in-office
Standard company text repeated across ARQ's postings is omitted here.
Similar positions
Explore more