# Security Engineer | Generalist at ARQ

> Open job at ARQ in Kraków, Poland. Workplace: Hybrid.

Source: Poland Dev Jobs, https://poland-devjobs.com/jobs/arq-security-engineer-generalist-1klpy17
Posted 6 November 2026. Last checked on the employer's career site: 10 November 2026.

## Facts

- Company: [ARQ](https://poland-devjobs.com/companies/arq)
- Location: Kraków, Poland
- Workplace: Hybrid
- Employment type: Full-time
- Polish: Not required
- English: Fluent
- Skills: AWS, Kubernetes, LLMs
- Not mentioned in the job post: salary, visa sponsorship, relocation, where you can apply from

## Job description

### What you'll do

- Build and improve SIEM detection rules, alert pipelines, and automated response playbooks (Datadog SIEM, CrowdStrike, Cloudflare)
- Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
- Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
- Conduct cloud security assessments across AWS and Kubernetes environments
- Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements
- Assess and secure AI/agentic workflows across the company — reviewing prompts, preventing destructive actions, and controlling data exposure
- Establish and run the vendor security assessment process — building a scalable due diligence framework for third-party onboarding

### What you'll need

- 4–7 years in cyber security, ideally having built or significantly shaped the security function at a startup or high-growth company - you've been the person who sets things up, not just maintains them
- 2+ years at a regulated fintech/bank/payment company
- Hands-on experience with cloud infrastructure security (AWS, Kubernetes)
- Working knowledge of SIEM platforms and detection engineering - you've written detection rules, not just consumed alerts
- Familiarity with application security practices: threat modelling, secure code review, CI/CD pipeline hardening, and API security testing
- Experience with endpoint security tooling (EDR/XDR) and identity & access management in a SaaS-heavy environment (Google Workspace, Okta/Cloudflare Access, SSO/SCIM)
- Ability to assess and secure emerging AI/agentic tooling - you understand the risks of LLM integrations, MCP servers, and automated workflows, and can define practical guardrails
- Experience running or contributing to vendor security assessments and third-party due diligence
- Strong written and verbal communication
- Business fluent in English

### Benefits

- Competitive salary and benefits
- Stock options, so you own part of what you build
- Discretionary performance bonus
- The latest tools and technology
- A world-class team that will challenge and grow your skills
- The opportunity to help build the best fintech app in Latin America
- Office Policy: 3-4 days a week in-office

## How to apply

Apply on the job page, https://poland-devjobs.com/jobs/arq-security-engineer-generalist-1klpy17: its Apply button opens the employer's own application page.

## More jobs from ARQ

- [Senior Detection Engineer | SecOps](https://poland-devjobs.com/jobs/arq-senior-detection-engineer-secops-zo974bj): ARQ, Kraków, Poland. Hybrid. Posted 30 October 2026.
- [Lead Software Engineer (Java)](https://poland-devjobs.com/jobs/arq-lead-software-engineer-java-nmt2hl7): ARQ, Kraków, Poland. Hybrid. Posted 26 October 2026.
- [Senior Software Engineer (Java)](https://poland-devjobs.com/jobs/arq-senior-software-engineer-java-45zbfng): ARQ, Kraków, Poland. Hybrid. Posted 26 October 2026.
- [Software Engineer (Java)](https://poland-devjobs.com/jobs/arq-software-engineer-java-23tr8uz): ARQ, Kraków, Poland. Hybrid. Posted 26 October 2026.