Senior Detection Engineer – AI-Driven SecOps for Fintech

ARQ; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary and benefits

Stock options

Discretionary performance bonus

The latest tools and technology

A world-class team that will challenge

The opportunity to help build the best

Office Policy: 3-4 days a week in‑the‑

Job summary

ARQ is seeking an experienced security professional to own detection engineering and shape how we detect and respond to threats. You’ll work with our CISO and a small global security team to onboard logs, write detections, validate coverage and automate intelligence and responses.

Strong Python, Terraform, and SIEM experience are essential. You will map coverage to MITRE ATT&CK, review detections as code, and build AI-enabled agents for rule authoring and alert triage.

Qualifications

• 5+ years in security, including 3+ years owning detections in production.
• Hands-on experience with a cloud SIEM and its query language (e.g., Datadog Cloud SIEM, Splunk, Elastic).
• Deep knowledge of AWS logs (CloudTrail, IAM) and SaaS audit logs (Google Workspace, GitHub, GitLab, Okta).
• Experience managing detections as code using Terraform, Git, CI pipelines and code review.
• Mapping detections to MITRE ATT&CK and testing with Atomic Red Team / Stratus Red Team.
• Python for automation and security tooling; shipping automation or AI agents.
• Hands-on incident response experience and clear incident write-ups.
• Ability to work independently in a small team without a dedicated SOC.
• Strong English communication.

Responsibilities

• Own detection engineering end to end in Datadog Cloud SIEM: onboard log sources and build coverage.
• Write, test and tune detection rules to reduce false positives.
• Map coverage to MITRE ATT&CK and validate by reproducing attacker activity.
• Manage detections as code with version control and CI pipelines.
• Build automation and AI agents for rule authoring, validation and threat hunting.
• Investigate security incidents: triage, scope, evidence collection and write-ups.
• Develop automated response and containment capabilities.
• Track detection coverage and share results with security leadership.

Skills

Detection engineering

Datadog Cloud SIEM

Python

Terraform

MITRE ATT&CK mapping

Incident response

English communication

Tools

Datadog Cloud SIEM

Splunk

Elastic

Google SecOps

Terraform

Git

Job description

ARQ is seeking an experienced security professional to own detection engineering and shape how we detect and respond to threats. You’ll work with our CISO and a small global security team to onboard logs, write detections, validate coverage and automate intelligence and responses.

Strong Python, Terraform, and SIEM experience are essential. You will map coverage to MITRE ATT&CK, review detections as code, and build AI-enabled agents for rule authoring and alert triage.