Hands-On Security Operations Engineer (Vulnerability & SOC)

Archlabs.com; New York (NY); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Strong team

High impact

Product market fit

Team camaraderie

Great office at 199 Water Street

Lunch provided

Job summary

Arch is seeking a Security Operations Engineer to join a small, hands-on security team. You will own vulnerability management, detection engineering, and security operations across the organization, partnering with engineering on patching, logging, and incident investigations.

This role emphasizes collaboration, cloud security experience (AWS), and a practical, execution-focused mindset to help Arch scale securely from its New York City base with some roles open to Boston candidates.

Qualifications

• Hands-on experience with vulnerability management and detection engineering (SIEM, log analysis, alerting).
• Understanding of security fundamentals (OWASP, NIST, CIS Benchmarks, SOC 2).
• Experience with cloud infrastructure security, specifically AWS (IAM, VPC, Secrets Manager).

Responsibilities

• Own vulnerability scanning, triage, and remediation tracking with engineering teams to deploy patches.
• Maintain SIEM/SOC stack and build/refine detections for DLP, IoC, and cloud vulnerabilities.
• Support security logging and audit processes for SOC 2 and ISO 27001 requirements.
• Assist with infrastructure security checks and security investigations.
• Engage in cross-functional projects as a core team member, including vendor security due diligence and IT asset management.

Skills

Vulnerability management

SIEM / detection engineering

Log analysis

Threat modeling

Security fundamentals

AWS security

Scripting (Python, Bash, Go)

Collaborative mindset

Tools

Terraform

Snyk

IAM / VPC (AWS)

CI/CD security tooling

Cloud security tooling

Job description

Arch is seeking a Security Operations Engineer to join a small, hands-on security team. You will own vulnerability management, detection engineering, and security operations across the organization, partnering with engineering on patching, logging, and incident investigations.

This role emphasizes collaboration, cloud security experience (AWS), and a practical, execution-focused mindset to help Arch scale securely from its New York City base with some roles open to Boston candidates.