Security Operations Engineer – Onsite NYC, SOC & Cloud Security

Menlo Ventures; New York (NY); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Strong team

High impact

Product market fit

Team camaraderie

Great office: 199 Water Street

Lunch is on us

Job summary

Arch, a fast-growing fintech in New York City, is seeking a Security Operations Engineer to join a small, hands-on security team. You will bridge security findings with engineering, supporting vulnerability management, SIEM, and compliance programs as Arch scales.

This role emphasizes cloud security in AWS, incident investigations, and cross‑functional work, including vendor due diligence and IT asset management. Onsite at our NYC office with opportunities for select roles in other locations.

Qualifications

• Experience in a small, fast-paced security team.
• Hands-on vulnerability management and detection engineering.
• Understanding of security fundamentals (OWASP, NIST, CIS Benchmarks, SOC 2).
• Experience with cloud infrastructure security, specifically AWS.
• Proficiency in scripting and automation (Python, Bash, or Go) and reading code for security investigations.

Responsibilities

• Own vulnerability scanning, triage, and remediation tracking with engineering coordination.
• Maintain the SIEM/SOC stack and refine detections for DLP, IoC, and cloud vulnerabilities.
• Maintain and improve security logging and audit processes to support SOC 2 and ISO 27001.
• Support infrastructure security checks and assist with security investigations.
• Engage in cross-functional projects including vendor security due diligence and IT asset management.

Skills

Vulnerability management

Detection engineering

SIEM

Log analysis

Alerting

Scripting

Automation

Python

Bash

Go

Cloud security

AWS

Collaboration

Security fundamentals

Tools

SIEM platforms

Terraform

AWS

Snyk

Job description

Arch, a fast-growing fintech in New York City, is seeking a Security Operations Engineer to join a small, hands-on security team. You will bridge security findings with engineering, supporting vulnerability management, SIEM, and compliance programs as Arch scales.

This role emphasizes cloud security in AWS, incident investigations, and cross‑functional work, including vendor due diligence and IT asset management. Onsite at our NYC office with opportunities for select roles in other locations.