Security and Threat Operations Engineer

The role

You will build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments. You will investigate security events and support vulnerability management to protect the fintech environment.

What you will do

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
• Review traffic patterns across APIs, authentication flows, and WAF telemetry.
• Use AI for triage, analysis, and workflow automation.
• Operate vulnerability management program by triaging and driving remediation.
• Develop Python-based tooling and automation.
• Partner with Product Security to translate threat models into detections and playbooks.
• Investigate security events end to end.
• Support vulnerability management and operational security practices aligned with PCI and SOC 2.
• Participate in proactive threat hunting and a 24x7 security incident response on-call rotation.

Required qualifications

• 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response.
• Experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry.
• Ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts.
• Strong Python programming skills.
• Experience building and tuning detections in a SIEM or detection platform.
• Experience working with observability and logging systems such as CloudWatch, Datadog, or similar platforms.
• Experience operating or supporting a vulnerability management program.
• Familiarity with cloud and application security findings from platforms such as Wiz.
• Experience with at least one major cloud provider.
• Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs.
• Strong understanding of threat modeling, risk prioritization, and practical security controls.
• Practical experience using AI tools in security workflows.

Nice to have

• Experience with AWS

Benefits

• Competitive base salary
• Stock options
• Health benefits from Day 1
• 401(k) plan with company match
• Flexible time off (FTO)

Before you apply

• AI-assisted initial screen

About the company

OnePay is a consumer fintech platform that provides banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto. It is backed by Walmart and Ribbit Capital.