Senior Detection Engineer | SecOps

The role

You will own detection engineering and help shape how ARQ detects and responds to threats. You will work with the CISO and a small global security team to build detections, automation, and AI agents.

What you will do

• Own detection engineering end to end in Datadog Cloud SIEM
• Write, test and tune detection rules
• Map coverage to MITRE ATT&CK and validate it by reproducing attacker activity
• Manage detections as code using version control, CI pipelines and code review
• Build and run automation and AI agents for rule authoring, detection validation, coverage mapping, alert triage and threat hunting
• Investigate security incidents including triage, scoping, evidence collection and clear incident write-ups
• Help develop automated response and containment capabilities
• Track and communicate detection coverage, validation results and response performance to security leadership

Required qualifications

• 5+ years in security
• 3+ years writing and owning detections in production
• Hands-on experience with a cloud SIEM and its query language, such as Datadog Cloud SIEM, Splunk, Elastic, Google SecOps
• Deep knowledge of AWS logs, particularly CloudTrail, IAM and IAM Identity Center
• Experience with SaaS audit logs such as Google Workspace, GitHub, GitLab or Okta
• Experience managing detections as code using Terraform, Git, CI pipelines and code review
• Practical experience mapping detections to MITRE ATT&CK and testing rules with tools such as Atomic Red Team or Stratus Red Team
• Python skills for automation, log analysis and security tooling
• Record of shipping automation or AI agents that others use
• Hands-on incident response experience
• Ability to work independently and prioritise effectively in a small team
• Strong written and verbal communication in English

Nice to have

• Familiarity with CrowdStrike Falcon, Datadog SIEM, Cloudflare Zero Trust or WAF
• Experience working with Kubernetes (EKS) audit logs
• Threat hunting, red team or purple team experience
• Experience building agentic workflows using Claude or OpenAI
• A background in fintech, payments or crypto, with exposure to SOC 2 or PCI DSS
• Spanish or Portuguese language skills

Benefits

• Competitive salary and benefits
• Stock options
• Discretionary performance bonus
• The latest tools and technology
• A world-class team that will challenge and grow your skills
• The opportunity to help build the best fintech app in Latin America

About the company

ARQ is a company building the best fintech app in Latin America.