Senior Detection Engineer - AI-Driven SecOps (Hybrid)

ARQ; Greater London; Sur place; GBP 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Competitive salary

Stock options

Discretionary bonus

Latest tools

World-class team

Fintech app project

In-office 3-4 days a week

Résumé du poste

ARQ is seeking a detection engineer to own end‑to‑end detection engineering in a cloud SIEM. You will onboard new log sources, write and tune detections, and ensure coverage aligns with MITRE ATT&CK.

You’ll build automation and AI agents to support rule authoring, validation and threat hunting while collaborating with the CISO and security team. You’ll apply hands-on cloud SIEM expertise, work on incidents, and help develop automated response capabilities in a fast‑paced fintech environment.

Qualifications

• 5+ years in security with production detections ownership.
• Hands-on cloud SIEM experience and query language proficiency.
• Deep knowledge of AWS logs (CloudTrail, IAM) and SaaS audit logs.
• Experience managing detections as code with Terraform and Git.
• Experience mapping detections to MITRE ATT&CK and testing rules.
• Python for automation and security tooling.
• Incident response experience including remediation.
• Ability to work independently in a small team.

Responsabilités

• Own detection engineering end to end in Datadog Cloud SIEM, onboard logs, build coverage.
• Write, test and tune detection rules, reduce false positives.
• Map coverage to MITRE ATT&CK and validate via attacker activity reproduction.
• Manage detections as code with version control and CI pipelines.
• Build automation and AI agents for rule authoring, validation and threat hunting.
• Investigate incidents, scope, collect evidence and write clear reports.
• Develop automated response and containment capabilities.
• Track detection coverage and communicate results to leadership.

Connaissances

5+ years in security

3+ years detecting in production

English communication

Outils

Datadog Cloud SIEM

Splunk

Elastic

Google SecOps

Terraform

Git

CI pipelines

Atomic Red Team

Stratus Red Team

Python

Kubernetes (EKS)

Description du poste

ARQ is seeking a detection engineer to own end‑to‑end detection engineering in a cloud SIEM. You will onboard new log sources, write and tune detections, and ensure coverage aligns with MITRE ATT&CK.

You’ll build automation and AI agents to support rule authoring, validation and threat hunting while collaborating with the CISO and security team. You’ll apply hands-on cloud SIEM expertise, work on incidents, and help develop automated response capabilities in a fast‑paced fintech environment.