Security Engineer | Generalist
Arq · London
Salary not listed · Full-Time · Posted 9 hours ago
Sponsorship evidence
What this means: We couldn't find the employer on a sponsor register and the advert doesn't say whether sponsorship is offered. That doesn't mean it isn't — ask the employer.
Source: No evidence found · Last checked · Register checked · Full advert text checked
No salary information provided for this job
Estimate only, based on published Home Office figures. Not immigration advice — always confirm with your employer or a qualified immigration adviser.
About the job
What you'll do • Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare) • Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures • Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling • Conduct cloud security assessments across AWS and Kubernetes environments • Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements • Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure • Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding What you'll need • 4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them • 2+ years at a regulated fintech/bank/payment company • Hands-on experience with cloud infrastructure security (AWS, Kubernetes) • Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts • Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing • Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM) • Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails • Experience running or contributing to vendor security assessments and third-party due diligence • Strong written and verbal communication • Business fluent in English Benefits • Competitive salary and benefits • Stock options, so you own part of what you build • Discretionary performance bonus • The latest tools and technology • A world-class team that will challenge and grow your skills • The opportunity to help build the best fintech app in Latin America • Office Policy: 3-4 days a week in-office Find Jobs in United Kingdom on Arbeitnow
Estimate only — not immigration advice. Always confirm sponsorship and eligibility directly with the employer.