Security and Threat Operations Engineer
OnePay · Remote · United States (Remote) ·
COMPENSATION
$140k – $190k
Listed on the employer's job board (Ashby)
- Fully remote (US)
- Senior level role
- Python + AWS
- Threat detection focus
- Stock options included
Join OnePay's security team to safeguard a fast-moving financial services platform used by millions. You will partner with Product and Platform Security teams to turn production signals into actionable detection and hardening initiatives. Your work ensures the safety of banking, savings, and investing products by proactively identifying and stopping compromised behaviors.
What you'll do
- Build and tune detections, alerts, and monitoring workflows across cloud and application environments.
- Review API traffic and authentication flows to identify malicious activity and abuse patterns.
- Use AI tools for triage and automation while defining guardrails for AI-enabled systems.
- Operate the vulnerability management program by triaging and driving remediation for findings.
- Develop Python-based tooling to improve investigations, enrichment, and operational scale.
- Investigate security events end-to-end, including triage, scoping, and containment support.
- Support security practices aligned with PCI and SOC 2 expectations.
- Participate in proactive threat hunting and a 24x7 security incident response on-call rotation.
What you'll need
- Five or more years of experience in information security, threat detection, or incident response.
- Strong experience investigating suspicious activity in web, API, and infrastructure telemetry.
- Ability to distinguish attacker behavior from normal production noise and identify fraud patterns.
- Strong Python programming skills for writing maintainable automation and analysis code.
- Experience building and tuning detections in a SIEM or detection platform like Datadog.
- Experience operating a vulnerability management program including triage and prioritization.
- Familiarity with cloud security findings from platforms such as Wiz.
- Experience with at least one major cloud provider, preferably AWS.
- Working knowledge of identity systems, modern authentication flows, and API security.
- Practical experience using AI tools in security workflows with awareness of associated risks.
Stack
- Python
- AWS
- Wiz
- Datadog
- CloudWatch
- Kubernetes
- Node
- TypeScript
How you'll work
- Fully remote within the United States
- Flexible time off policy
- 24x7 security incident response on-call rotation
What you get
- Competitive base salary and stock options
- Health benefits starting from day one
- 401(k) plan with company match
- Remote-friendly culture with growth opportunities
Hiring process
- AI-assisted initial screen
- Interview with Talent Partner
- Technical or Hiring Manager Interview
- Team Interview
- Executive Interview
- Offer