arq - Senior Detection Engineer | SecOps

• You'll own detection engineering and help shape how ARQ detects and responds to threats. From bringing new log sources into ARQ’s SIEM to writing, testing and tuning detections, you'll be responsible for making sure our coverage works when it matters. • 5+ years in security, including 3+ years writing and owning detections in production. • Hands-on experience with a cloud SIEM and its query language, such as Datadog Cloud SIEM, Splunk, Elastic, Google SecOps. • Deep knowledge of AWS logs, particularly CloudTrail, IAM and IAM Identity Center, alongside experience with SaaS audit logs such as Google Workspace, GitHub, GitLab or Okta. • Experience managing detections as code using Terraform, Git, CI pipelines and code review. • Practical experience mapping detections to MITRE ATT&CK and testing rules by reproducing attacks with tools such as Atomic Red Team or Stratus Red Team. • Python skills for automation, log analysis and security tooling, with a record of shipping automation or AI agents that others use. • Hands-on incident response experience, from investigating alerts to documenting findings and remediation. • The ability to work independently, prioritise effectively and own outcomes in a small team without a dedicated SOC behind you. • Strong written and verbal communication in English. • Familiarity with CrowdStrike Falcon, Datadog SIEM, Cloudflare Zero Trust or WAF. • Experience working with Kubernetes (EKS) audit logs. • Threat hunting, red team or purple team experience. • Experience building agentic workflows using Claude or OpenAI. • A background in fintech, payments or crypto, with exposure to SOC 2 or PCI DSS. • Spanish or Portuguese language skills.