Senior Security Engineer, Founding Brazil Role
Are you a visionary Security Engineer ready to lay the bedrock of cybersecurity in Brazil for a rapidly scaling fintech? ARQ is searching for our first dedicated Security Engineer in the region. This isn't just a job; it's a foundational role where you'll have unparalleled autonomy to define, build, and lead our security strategy, shaping how we protect our innovative platform and users across Latin America. Working closely with our global security team, you'll have the unique opportunity to set the standard for "good security" from day one.
We're looking for a multifaceted expert who thrives in a dynamic environment. Security at ARQ spans Application Security, Security Operations, and Governance, Risk & Compliance. In this pioneering role, you'll be comfortable navigating across at least two of these critical domains, taking ownership where others might specialize.
What You'll Be Building and Leading
Pioneer Application Security: Drive the application security roadmap, setting new standards for threat modeling, secure code review practices, API security testing strategies, and the overall security pipeline architecture.
Secure AI Innovation: Define ARQ's approach to securing cutting-edge AI/agentic workflows. You'll establish critical guardrails for prompts, destructive actions, and data exposure, advising teams building with LLMs and MCP servers.
Elevate Detection Engineering: Set the technical direction for advanced detection engineering, alert pipelines, and automated response across our robust security stack (Datadog SIEM, CrowdStrike, Cloudflare). You'll raise the bar on how the team designs and reviews detections.
Champion Incident Response: Own incident response readiness at a program level, designing comprehensive IR playbooks, leading tabletop exercises, and serving as the technical lead during major incidents.
Master Cloud Security: Define the standard and approach for cloud security assessments across AWS and Kubernetes environments. You'll review findings from other engineers and tackle the most complex security challenges directly.
Fortify Vendor Security: Take ownership of our vendor security assessment framework, continuously improving the due diligence process and managing reviews for the highest-risk third-party partners.
Mentor & Grow Talent: Act as a critical technical mentor to mid and senior engineers, providing expert review for detection logic, assessments, and playbooks, without formal management responsibilities.
What You'll Bring to the Team
Experienced Leader: A proven track record of 7+ years in information security, with demonstrated experience building or substantially maturing a security function or program from the ground up.
Fintech Expertise: Minimum of 2 years navigating the unique security landscape of a regulated fintech, banking, or payment company.
Cloud Architecture Guru: Deep, hands-on expertise in cloud infrastructure security (AWS, Kubernetes), with the ability to architect robust security controls.
AppSec Visionary: Proven experience driving application security programs, including threat modeling frameworks, secure code review standards, CI/CD pipeline hardening, and API security testing strategy.
AI Security Prowess: Demonstrated ability to define practical security guardrails for AI/agentic tooling. You understand the architectural risks of LLM integrations, MCP servers, and automated workflows.
Detection Engineering Maestro: Strong background in detection engineering, having designed comprehensive detection strategies and mentored others in writing high-fidelity rules.
Endpoint & Identity Specialist: Deep experience with endpoint security tooling (EDR/XDR) and identity & access management architecture in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM).
Vendor Risk Management: Experience designing or significantly evolving a vendor security assessment/third-party due diligence program.
Exceptional Communicator: Excellent written and verbal communication skills, comfortable representing complex security decisions to leadership and cross-functional stakeholders.
Global Collaborator: Business fluent in English, essential for seamless global team collaboration.
Why ARQ? Beyond the Code
Competitive Rewards: Competitive compensation package designed to reward your expertise and impact.
Equity Ownership: Stock options, so you literally own a part of what you help build.
Performance Bonus: Discretionary performance bonus recognizing your contributions.
Cutting-Edge Tools: Access to the latest tools and technologies to empower your work.
World-Class Team: Collaborate with a diverse, world-class team that will challenge your skills and foster continuous growth.
Make an Impact: The unparalleled opportunity to help build and secure the best fintech app in Latin America.
Hybrid Work: Our office policy encourages 3-4 days a week in-office to foster collaboration and team synergy.