Security Operations Engineer

About the role

Arch is a fast‑growing fintech that standardises private‑investment data on a single platform. As a Security Operations Engineer you will join a small, high‑impact security team, bridging security findings with engineering teams to keep the company’s tools, processes and compliance posture effective as the business scales.

Key responsibilities

• Own vulnerability scanning, triage and remediation tracking, coordinating patch deployment with engineering.
• Maintain and enhance the SIEM/SOC stack, creating detections for data loss prevention, indicators of compromise and cloud vulnerabilities.
• Support SOC 2 and ISO 27001 audit requirements through security logging and audit process improvements.
• Assist with infrastructure security checks, investigations and cross‑functional security projects.
• Manage vendor security due‑diligence, refine IT asset management and own ad‑hoc security tasks based on team priorities.

Required profile

• Experience in a small, fast‑paced security team.
• Hands‑on vulnerability management experience (CVSS, patch lifecycles).
• Detection engineering background (SIEM, log analysis, alerting).
• Understanding of security frameworks such as OWASP, NIST, CIS Benchmarks, SOC 2.
• Practical knowledge of AWS security (IAM, VPC, Secrets Manager).
• Proficiency in scripting/automation (Python, Bash, or Go) and basic code reading for investigations.

Required skills

• Vulnerability scanning and remediation
• SIEM and SOC operations
• Log analysis and alert creation
• OWASP, NIST, CIS Benchmarks, SOC 2
• AWS security services (IAM, VPC, Secrets Manager)
• Python scripting
• Bash scripting
• Go programming basics