Security and Threat Operations Engineer

📋 Description

• • As a Security and Threat Operations Engineer at OnePay, you will play a critical role in protecting the company’s fast-moving fintech environment by turning production signals into actionable detection, response, and hardening initiatives. You will work closely with Product Security, Platform Security, and Engineering teams to proactively identify, monitor, and stop compromised behaviors across products and infrastructure, ensuring the safety and trust of both the business and its customers.
• • Your day-to-day responsibilities include building and tuning detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments; reviewing traffic patterns across APIs, authentication flows, and WAF telemetry to detect malicious activity and abuse patterns; using AI responsibly to enhance triage, analysis, and workflow automation; helping operate the vulnerability management program by triaging, prioritizing, and driving remediation for findings from tools like Wiz; developing Python-based tooling and automation to improve investigations and operational scale; partnering with Product Security to translate threat models and security reviews into production detections and response playbooks; investigating security events end to end, including triage, scoping, containment support, and remediation follow-through; supporting vulnerability management and operational security practices aligned with PCI and SOC 2 requirements; and participating in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation.
• • OnePay is a consumer fintech trusted by millions of Americans, backed by Walmart and Ribbit Capital, offering an all-in-one financial services platform that integrates banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto. The company partners with employers, HCM providers, and gig platforms to deliver embedded financial services to employees and frontline workers. OnePay moves fast, values urgency, low ego, and exceptional performance, and is building something category-defining in the financial services space.
• • In this role, you will deepen your expertise in cloud-native security, threat detection, and vulnerability management while gaining hands-on experience with AI-augmented security workflows. You will develop advanced Python automation skills, strengthen your ability to analyze complex telemetry data, and contribute to compliance-aligned security practices. You’ll also grow your cross-functional collaboration abilities in a high-velocity environment where security must keep pace with rapid product innovation.