Senior Security Engineer (Remote - North Carolina, Florida, or South Carolina preferred)

Posted yesterday

mcneilGreensboro (NC)

SENIORITY

Lead

Apply

About the role

With a company culture rooted in collaboration, expertise and innovation, we aim to promote progress and inspire our clients, employees, investors and communities to achieve their greatest potential. Our work is the catalyst that helps others achieve their goals. In short, We Enable Possibility?.
Overview: We are seeking a Senior Security Engineer to protect enterprise systems, data, and cloud environments from evolving cyber threats. This role focuses on advanced security engineering, threat detection, and AI-driven security capabilities. You will serve as a senior technical resource, leading complex investigations and improving detection and response through automation and AI.Why This RoleThis role offers the opportunity to shape next-generation security capabilities, including AI-driven detection, automation, and cloud security, while working on high-impact enterprise challenges. This is a remote role that can sit anywhere in US (near Arch office preferred).
Key Responsibilities: Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response. Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection. Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR).Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents. Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps. Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads. Mentor junior team members, conduct code reviews for automation scripts, and promote robust software engineering best practices within the security team.
Qualifications:
  • 7+ years of cybersecurity experience with a focus on security or detection engineering 3+ years in a Sr. Security Engineer role
  • Deep technical knowledge of incident response, threat hunting, and adversary TTPs.
  • Experience implementing and managing detection logic across enterprise SIEM, EDR/XDR, or cloud-native security tools.
Experience securing and monitoring cloud infrastructure (AWS, Azure, or GCP).Demonstrated experience building functional tools in Python/Powershell, interacting with REST APIs, and writing clean, structured code (experience with Git and CI/CD pipelines preferred).Bachelor's degree in Computer Science, Cybersecurity, or Engineering.
Preferred: Practical understanding of building or implementing LLM-based agents, prompt engineering, and integrating AI models into automated workflows and custom API integrations. Familiarity with AI/LLM-specific security vulnerabilities (e.g., OWASP Top 10 for LLMs, prompt injection, data poisoning, model evasion).Experience with SIEM, EDR/XDR, SOAR, or identity security platforms Advanced certifications (e.g., CISSP, GIAC GCIA/GCIH, or cloud security certifications).Master's degree in Computer Science, Cybersecurity, IT Management with an emphasis on AI/Automation. LI-Remote #LI-ZP1Benefitsmultiple medical plans plus dental, vision and prescription drug coveragea competitive 401k with generous matchingPTO beginning at 20 days per yearup to 12 paid company holidays per year plus 2 paid days of Volunteer Time Offerbasic Life and AD&D Insurance as well as Short and Long-Term Disability Paid Parental Leave of up to 10 weeks Student Loan Assistance and Tuition Reimbursement, Backup Child and Elder Careand more10200 Arch Capital Services LLCArch Capital Group Ltd. is a Bermuda-based specialty insurer that provides insurance, reinsurance and mortgage insurance on a worldwide basis. With a 20+-year track record of delivering results and a coveted position on the S&P 500 index, Arch is a great place to grow your career.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this