Senior Detection Engineer SecOps
ARQ is a financial services platform that lets users in Latin America hold global currencies, make cross-border payments, invest in international markets, and spend worldwide with a card.
Funding history
Projects
About ARQ ( Prev DolarApp )
ARQ serves travelers, investors, and professionals across Latin America who need access to global currencies and financial markets. Users can hold digital dollars and euros, receive and send international payments via dedicated US and European account details, invest in US stocks and ETFs, and spend globally with a card at market conversion rates. The platform is available across Mexico, Argentina, Colombia, and Brazil.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will own detection engineering in Datadog Cloud SIEM, onboard log sources, and write, test, and tune detection rules. You will map and validate coverage against MITRE ATT&CK, manage detections as code, build automation and AI agents, investigate incidents, and improve response and containment capabilities.
Requirements
- 5+ years of security experience, including 3+ years writing and owning production detections
- Hands-on experience with a cloud SIEM and query language
- Deep knowledge of AWS logs, including CloudTrail, IAM, and IAM Identity Center
- Experience with SaaS audit logs
- Experience managing detections as code using Terraform, Git, CI pipelines, and code review
- Experience mapping detections to MITRE ATT&CK and reproducing attacks
- Python skills for automation, log analysis, and security tooling
- Hands-on incident response experience
- Strong written and verbal English communication
Responsibilities
- Own end-to-end detection engineering in Datadog Cloud SIEM
- Identify and onboard missing log sources
- Write, test, and tune detection rules
- Map and validate detection coverage against MITRE ATT&CK
- Manage detections as code with version control, CI pipelines, and code review
- Build and operate automation and AI agents for security workflows
- Investigate incidents and document findings and remediation
- Develop automated response and containment capabilities
- Report detection coverage and response performance to security leadership
Benefits
- Stock options
- Discretionary performance bonus
- Latest tools and technology