Senior Detection Engineer | SecOps — Hybrid (Stock Options)

Arqfinance; New York (NY); Hybrid; USD 160,000 - 210,000; Full time

Benefits offered by this job

Competitive salary and benefits

Stock options, so you own part of what

Discretionary performance bonus

The latest tools and technology

A world-class team that will challenge

The opportunity to help build the best

Office Policy: 3-4 days a week in‑line

Job summary

ARQ is seeking a Senior Detection Engineer to own end-to-end detection engineering within a Datadog Cloud SIEM. You’ll map coverage to MITRE ATT&CK, onboard log sources, and build automated detections with CI pipelines and version control.

You’ll work with a small global security team, review AI-assisted outputs, and continuously improve detection coverage while reducing false positives. Hybrid work in multiple cities.

Qualifications

• 5+ years in security with 3+ years owning detections in production.
• Hands-on experience with a cloud SIEM and its query language.
• Deep knowledge of AWS logs (CloudTrail, IAM) and SaaS audit logs.
• Experience mapping detections to MITRE ATT&CK and testing rules.
• Python for automation and security tooling.
• Incident response experience and documentation.
• Strong written and spoken English.

Responsibilities

• Own detection engineering end to end in Datadog Cloud SIEM.
• Write, test and tune detection rules to reduce false positives.
• Map coverage to MITRE ATT&CK and validate by reproducing activity.
• Manage detections as code with version control and CI pipelines.
• Build automation and AI agents for rule authoring and validation.
• Investigate security incidents and write incident reports.
• Help develop automated response and containment capabilities.
• Track and report detection coverage and response performance to security leadership.

Skills

Senior security experience

Cloud SIEM expertise

MITRE ATT&CK mapping

Detections as code

Python automation

Incident response

English communication

Tools

Datadog Cloud SIEM

Splunk

Elastic

Terraform

Git

Job description

ARQ is seeking a Senior Detection Engineer to own end-to-end detection engineering within a Datadog Cloud SIEM. You’ll map coverage to MITRE ATT&CK, onboard log sources, and build automated detections with CI pipelines and version control.

You’ll work with a small global security team, review AI-assisted outputs, and continuously improve detection coverage while reducing false positives. Hybrid work in multiple cities.