RemoteWLBRemote only
Back to all jobs
A
Remote role · senior-s

Senior Security Engineer (Remote - North Carolina, Florida, or South Carolina preferred)

Arch

Before you apply

Role details

The practical picture
Work arrangement
Fully remote
Employment
Full-time
Eligible locations
United States

Work & location

Remote policy
This is a remote role that can sit anywhere in US (near Arch office preferred)
Office locations
Greensboro, NC United States of America, US
Remote scope
United States

Experience & eligibility

Experience
7+ years of cybersecurity experience with a focus on security or detection engineering; 3+ years in a Sr. Security Engineer role

Compensation & benefits

Benefits
multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care

Inside the role

Department
Security
Seniority
Senior
Role signal brief

The role, at a glance

Extracted from the source posting · 95% confidence

Arch is hiring a Senior Security Engineer to lead advanced security engineering and AI-driven threat detection. The role involves building autonomous playbooks, tuning detection logic across SIEM/EDR/cloud platforms, and securing AI/LLM pipelines. Candidates require 7+ years of cybersecurity experience and a relevant bachelor’s degree.

Remote scope
United States

What you need

  • 7+ years of cybersecurity experience with a focus on security or detection engineering
  • 3+ years in a Sr. Security Engineer role
  • Deep technical knowledge of incident response, threat hunting, and adversary TTPs
  • Experience implementing and managing detection logic across enterprise SIEM, EDR/XDR, or cloud-native security tools
  • Experience securing and monitoring cloud infrastructure (AWS, Azure, or GCP)
  • Demonstrated experience building functional tools in Python/Powershell, interacting with REST APIs, and writing clean, structured code (experience with Git and CI/CD pipelines preferred).', 'Bachelor’s degree in Computer Science, Cybersecurity, or Engineering

What you will own

  • Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response.
  • Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection.
  • Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR).
  • Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents.
  • Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps.
  • Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads.
Core skills
PythonPowerShellSIEMEDR/XDRCloud Security (AWS/Azure/GCP)Threat HuntingIncident ResponseMITRE ATT&CKSOARAgentic AI Workflows

Remote policyThis is a remote role that can sit anywhere in US (near Arch office preferred)

Internal freshness window ends Oct 22, 2026
View source evidence
  • salary “”
  • location “This is a remote role that can sit anywhere in US (near Arch office preferred)”
  • remote_scope “This is a remote role that can sit anywhere in US (near Arch office preferred)”
  • applicant_location_requirements “This is a remote role that can sit anywhere in US (near Arch office preferred)”
  • must_have “7+ years of cybersecurity experience with a focus on security or detection engineering”
  • company_remote_policy “This is a remote role that can sit anywhere in US (near Arch office preferred)”
  • workplace_type “This is a remote role that can sit anywhere in US (near Arch office preferred)”
  • benefits “comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching”
  • department “Senior Security Engineer”
  • education_requirements “Bachelor’s degree in Computer Science, Cybersecurity, or Engineering.”
  • experience_months “7+ years of cybersecurity experience”
  • experience_requirements_text “7+ years of cybersecurity experience with a focus on security or detection engineering; 3+ years in a Sr. Security Engineer role”
  • employment_types “This is a remote role”
  • skills “Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR).”
  • seniority “Senior Security Engineer”
pythonpowershellsiemedr/xdr
Role brief

With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility℠.

Overview 

We are seeking a Senior Security Engineer to protect enterprise systems, data, and cloud environments from evolving cyber threats. This role focuses on advanced security engineering, threat detection, and AI-driven security capabilities. You will serve as a senior technical resource, leading complex investigations and improving detection and response through automation and AI. 

Why This Role 

This role offers the opportunity to shape next-generation security capabilities, including AI-driven detection, automation, and cloud security, while working on high-impact enterprise challenges. 

This is a remote role that can sit anywhere in US (near Arch office preferred).

Key Responsibilities 

  • Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response. 

  • Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection. 

  • Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR). 

  • Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents. 

  • Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps. 

  • Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads. 

  • Mentor junior team members, conduct code reviews for automation scripts, and promote robust software engineering best practices within the security team. 

Qualifications 

Required 

  • 7+ years of cybersecurity experience with a focus on security or detection engineering 

  • 3+ years in a Sr. Security Engineer role 

  • Deep technical knowledge of incident response, threat hunting, and adversary TTPs. 

  • Experience implementing and managing detection logic across enterprise SIEM, EDR/XDR, or cloud-native security tools. 

  • Experience securing and monitoring cloud infrastructure (AWS, Azure, or GCP). 

  • Demonstrated experience building functional tools in Python/Powershell, interacting with REST APIs, and writing clean, structured code (experience with Git and CI/CD pipelines preferred). 

  • Bachelor’s degree in Computer Science, Cybersecurity, or Engineering. 

Preferred 

  • Practical understanding of building or implementing LLM-based agents, prompt engineering, and integrating AI models into automated workflows and custom API integrations. 

  • Familiarity with AI/LLM-specific security vulnerabilities (e.g., OWASP Top 10 for LLMs, prompt injection, data poisoning, model evasion). 

  • Experience with SIEM, EDR/XDR, SOAR, or identity security platforms 

  • Advanced certifications (e.g., CISSP, GIAC GCIA/GCIH, or cloud security certifications). 

  • Master’s degree in Computer Science, Cybersecurity, IT Management with an emphasis on AI/Automation. 

#LI-Remote

#LI-ZP1

Arch is committed to helping employees succeed through our comprehensive benefits package that includes multiple medical plans plus dental, vision and prescription drug coverage; a competitive 401k with generous matching; PTO beginning at 20 days per year; up to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offer; basic Life and AD&D Insurance as well as Short and Long-Term Disability; Paid Parental Leave of up to 10 weeks; Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Care; and more. Click here to learn more on available benefits.

Do you like solving complex business problems, working with talented colleagues and have an innovative mindset? Arch may be a great fit for you. If this job isn’t the right fit but you’re interested in working for Arch, create a job alert! Simply create an account and opt in to receive emails when we have job openings that meet your criteria. Join our talent community to share your preferences directly with Arch’s Talent Acquisition team.

10200 Arch Capital Services LLC