Job description

With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠. Overview We are seeking a Senior Security Engineer to protect enterprise systems, data, and cloud environments from evolving cyber threats. This role focuses on advanced security engineering, threat detection, and AI-driven security capabilities. You will serve as a senior technical resource, leading complex investigations and improving detection and response through automation and AI. Why This Role This role offers the opportunity to shape next-generation security capabilities, including AI-driven detection, automation, and cloud security, while working on high-impact enterprise challenges. This is a remote role that can sit anywhere in US (near Arch office preferred). Key Responsibilities Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response. Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection. Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR). Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents. Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps. Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads. Mentor junior team members, conduct code reviews for automation scripts, and promote robust software engineering best practices within the security team. Qualifications Required 7 years of cybersecurity experience with a focus on security or detection engineering 3 year s in a Sr. Security Engineer role Deep technical knowledge of incident response, threat hunting, and adversary TTPs. Experience implementing and managing detection logic across enterprise SIEM, EDR/XDR, or cloud-native security tools. Experience securing and monitoring cloud infrastructure (AWS, Azure, or GCP) . Demonstrated experience building functional tools in Python/ Powershell , interacting with REST APIs, and writing clean, structured code (experience with Git and CI/CD pipelines preferred). Bachelor’s degree in Computer Science , Cybersecurity, or Engineering . Preferred Practical understanding of building or implementing LLM-based agents, prompt engineering, and integrating AI models into automated workflows and custom API integrations. Familiarity with AI/LLM-specific security vulnerabilities (e.g., OWASP Top 10 for LLMs, prompt injection, data poisoning, model evasion). Experience with SIEM, EDR/XDR, SOAR, or identity security platforms Advanced certifications (e.g., CISSP, GIAC GCIA/GCIH, or cloud security certifications). Master’s degree in Computer S cience , Cybersecurity, IT Management with an emphasis on AI/Automation. #LI-Remote #LI-ZP1 Arch is committed to helping employees succeed through our comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care; and more. Click here to learn more on available benefits. Do you like solving complex business problems, working with talented colleagues and have an innovative mindset? Arch may be a great fit for you. If this job isn’t the right fit but you’re interested in working for Arch, create a job alert! Simply create an account and opt in to receive emails when we have job openings that meet your criteria. Join our talent community to share your preferences directly with Arch’s Talent Acquisition team. 10200 Arch Capital Services LLC

Requirements

Must-haves

Why This Role
This role offers the opportunity to shape next-generation security capabilities, including AI-driven detection, automation, and cloud security, while working on high-impact enterprise challenges.
Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response.
Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection.
Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR).
Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents.
Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps.
Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads.
Mentor junior team members, conduct code reviews for automation scripts, and promote robust software engineering best practices within the security team.
7 years of cybersecurity experience with a focus on security or detection engineering
3 year s in a Sr. Security Engineer role
Deep technical knowledge of incident response, threat hunting, and adversary TTPs.
Experience implementing and managing detection logic across enterprise SIEM, EDR/XDR, or cloud-native security tools.
Experience securing and monitoring cloud infrastructure (AWS, Azure, or GCP) .
Bachelor’s degree in Computer Science , Cybersecurity, or Engineering .
10200 Arch Capital Services LLC

Nice-to-haves

This is a remote role that can sit anywhere in US (near Arch office preferred).
Demonstrated experience building functional tools in Python/ Powershell , interacting with REST APIs, and writing clean, structured code (experience with Git and CI/CD pipelines preferred).
Practical understanding of building or implementing LLM-based agents, prompt engineering, and integrating AI models into automated workflows and custom API integrations.
Familiarity with AI/LLM-specific security vulnerabilities (e.g., OWASP Top 10 for LLMs, prompt injection, data poisoning, model evasion).
Experience with SIEM, EDR/XDR, SOAR, or identity security platforms
Advanced certifications (e.g., CISSP, GIAC GCIA/GCIH, or cloud security certifications).
Master’s degree in Computer S cience , Cybersecurity, IT Management with an emphasis on AI/Automation.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipythonawsazuregcpllmrestci/cdapi

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Parental Leave