Latest AI JobsBrowse Jobs
OnePay logo

Security and Threat Operations Engineer

OnePayUnited States (Remote)Engineering
Apply on company site
Salary
$140K - $190K USD
Job type
Full-time
Work mode
Remote
Posted
11 Sept 2026
Status
Open · checked 7d ago

About this role

The Security and Threat Operations Engineer position at OnePay is a remote, full-time role based in the United States that suits an experienced information security professional eager to protect a fast-paced consumer fintech platform. This role involves turning production signals into actionable detection, response, and system hardening initiatives alongside engineering teams.

Role Overview

As a Security and Threat Operations Engineer, the individual will directly protect the digital environment by proactively identifying, monitoring, and stopping compromised behaviors across products and infrastructure. The daily work focuses on translating production signals into security actions, collaborating closely with Product Security, Platform Security, and Engineering teams to maintain customer trust and safety.

Key Responsibilities

Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior.
Use AI responsibly as a force multiplier for triage, analysis, and workflow automation while helping define guardrails for AI-enabled systems.
Help operate the vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz and related workflows.
Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale.
Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks.
Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation.
Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations.
Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation.

Requirements

5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment.
Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry.
Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts.
Strong Python programming skills for writing maintainable code for automation, enrichment, analysis, and security operations tooling.
Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch or Datadog.
Experience operating or supporting a vulnerability management program.
Familiarity with cloud and application security findings from platforms such as Wiz.
Experience with at least one major cloud provider, preferably AWS.
Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs.
Strong understanding of threat modeling, risk prioritization, and practical security controls.
Practical experience using AI tools in security workflows along with sound judgment regarding AI-specific risks.

Skills and Tools

Python
AWS
Kubernetes
React
TypeScript
Wiz
CloudWatch
Datadog
SIEM and detection platforms

Salary and Benefits

Competitive base salary ranging from $140,000 to $190,000 USD per year
Stock options and health benefits from Day 1
401(k) plan with company match
Remote-friendly setup across the US with flexible time off and career growth opportunities

About the Company

OnePay is a consumer fintech platform trusted by millions of Americans, bringing together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. The company partners with employers, HCM providers, and gig platforms to deliver embedded financial services to frontline workers. Backed by Walmart and Ribbit Capital, OnePay operates with rare scale, distribution, and a mission-driven culture.

How to Apply

To apply for this position, please visit the official company careers page.

Skills and tech stack

PythonAWSKubernetesReactTypeScript

Questions candidates ask

What is the salary range for the Security and Threat Operations Engineer?

The salary ranges from $140,000 to $190,000 USD per year, alongside stock options and health benefits.

Is this a remote position?

Yes, this role is fully remote within the United States.

How many years of experience are required?

Candidates must have 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response.

What technical skills are necessary for the role?

Required skills include Python programming, experience with AWS and cloud environments, security telemetry analysis, vulnerability management, and familiarity with tools like Wiz, CloudWatch, or Datadog.

What benefits does OnePay offer?

OnePay offers health benefits from Day 1, a 401(k) plan with company match, stock options, flexible time off, and competitive salary.

Ready to apply?

The application is on the official OnePay careers page.

Apply on company site