Senior Security Engineer
ARQ is a financial services platform that lets users in Latin America hold global currencies, make cross-border payments, invest in international markets, and spend worldwide with a card.
Funding
Projects
About ARQ ( Prev DolarApp )
ARQ serves travelers, investors, and professionals across Latin America who need access to global currencies and financial markets. Users can hold digital dollars and euros, receive and send international payments via dedicated US and European account details, invest in US stocks and ETFs, and spend globally with a card at market conversion rates. The platform is available across Mexico, Argentina, Colombia, and Brazil.
Skills
About the Role
You will establish and shape security practices across application security, security operations, and governance, risk, and compliance. You will secure AI workflows, improve monitoring and incident readiness, assess cloud environments, and run vendor security assessments.
Requirements
- 4–7 years of information security experience
- 2+ years at a regulated fintech, bank, or payment company
- Hands-on cloud infrastructure security experience with AWS and Kubernetes
- Knowledge of threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
- Ability to secure AI and agentic tooling, including LLM integrations, MCP servers, and automated workflows
- Working knowledge of SIEM platforms and detection engineering
- Experience with endpoint security tooling, identity and access management, Google Workspace, Okta, Cloudflare Access, SSO, and SCIM
- Experience with vendor security assessments and third-party due diligence
- Strong written and verbal English communication
Responsibilities
- Drive application security initiatives, including threat modelling, secure code review support, API testing, and security pipeline improvements
- Assess and secure AI and agentic workflows, including prompts, destructive actions, and data exposure
- Build and improve SIEM detection rules, alert pipelines, and automated response playbooks
- Contribute to incident response readiness through playbooks, tabletop exercises, and forensic procedures
- Conduct cloud security assessments across AWS and Kubernetes environments
- Establish and run the vendor security assessment process and third-party due diligence framework
Benefits
- Competitive benefits
- Stock options
- Discretionary performance bonus
- Latest tools and technology
