Lead security engineer

About Arcana Arcana is on a mission to revolutionize the investing landscape, empowering the world's top institutions to make high-stakes decisions with confidence. Our cutting-edge software and data platform processes millions of data points every minute, delivering lightning-fast computations and insights with unmatched precision. Built to tackle the most complex challenges in financial and risk strategy, the Arcana platform is transforming how the industry thinks, strategizes, and allocates. We're in a hyper-growth phase, experiencing rapid client growth, and doubling our world-class R& D team by end of 2025 This is a once-in-a-lifetime opportunity to be part of a high-impact journey as we build the next generation of financial technology. Founded in 2022 by Rich Falk-Wallace (former Portfolio Manager at Citadel) and Siva Sooriyan (ex-Director of Engineering at Linked In NYC), Arcana brings together a dream team of engineers and data scientists from top IITs and leading tech firms, alongside analysts from elite investment banks and private equity firms. Our momentum is backed by some of the world's most prestigious investors, including D1 Capital, Duquesne (Stan Druckenmiller), Tiger Global, Golden Tree Asset Management, and strategic angels such as Ryan Roslansky (CEO, Linked In) and Akshay Kothari (Co-founder, Notion) Joining Arcana means working at the intersection of finance and technology, shaping the future of investing with a passionate and elite team. If you're ready to take on big challenges, drive impact, and be part of a rapidly scaling startup, Arcana is the place to make your mark Job Description Function: IT Operations and Support → IT Security Cloud Security As our Lead Security Engineer, you'll own and elevate Arcana's overall security posture - cloud, on-prem, and everything in between. You'll design and enforce policies, automate controls, and harden infrastructure end-to-end. While your primary focus will be on our GCP resources, you'll also partner with teams across networking, applications, and compliance to ensure we're secure by design and resistant to drift. Responsibilities: Enterprise Security Architecture - Governance and Compliance, including driving adherence to ISO 27001 SOC 2 GDPR, and enforcing CIS benchmarks on all infrastructure. Policy, Automation, and Guardrails - own the end-to-end security lifecycle by defining policy-as-code, embedding continuous compliance checks into CI/CD, and building automated, drift-resistant guardrails across cloud, containers, and VMs. Infrastructure Hardening and Drift Detection - implement automated drift alerts and self-healing playbooks for VPCs, firewall rules, Kubernetes clusters, and endpoints. Monitoring, Logging, and Incident Response - configure Cloud Audit Logs, SIEM exports, and custom alerts for critical security events; lead root-cause investigations, build detection logic, and develop runbooks for cloud-wide incidents. Requirements: 5+ years driving security and compliance in dynamic, regulated environments- securing cloud-native platforms and hybrid infrastructures, with deep familiarity in fintech and portfolio-management standards, and best practices for supporting distributed, remote teams. Deep expertise with GCP security (IAM, KMS, VPC Service Controls, Cloud Logging/Audit, WAF, Sec Ops) and Kubernetes application hardening. Strong Infrastructure-as-Code skills (Terraform or equivalent) and Git Ops experience (Argo CD, Flux). Proficiency in Python scripting and policy-as-code frameworks (OPA, Gatekeeper). Excellent communicator - able to translate technical findings into clear policies and remediation plans. Helpful Experience: Familiarity with multi-cloud security controls. Security certifications (GCP Professional Security Engineer, CISSP, CKA/CKS). Experience with service mesh (Istio/Anthos) or zero-trust architectures.