Security and Threat Operations Engineer

🕒 September 11

🇺🇸 United States – Remote

💵 $140k - $190k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OnePay

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💳 Fintech

🏦 Banking

₿ Crypto

💰 $300M Series unknown on 2025-01

Fintech • Banking • Crypto

OnePay is a U. S. -based financial technology company that provides consumer-facing banking and payment products through partner banks. The app offers checking/savings with early pay and high-yield savings, a credit-builder program and secured Builder Mastercard, a CashRewards card with Walmart-focused cashback, investing and cryptocurrency trading, a digital wallet, pay-later options, and free tax filing for customers. OnePay partners with Coastal Community Bank, Lead Bank, Synchrony, and other providers for banking, card issuance, lending, and custody services; it is not itself a bank.

📋 Description

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments • Review API, authentication-flow, and WAF traffic patterns to identify malicious activity, abuse patterns, and anomalous behavior • Use AI for triage, analysis, and workflow automation while helping define guardrails for AI-enabled systems • Operate the vulnerability management program by triaging, prioritizing, and driving remediation of findings from Wiz and vulnerability scanning • Develop Python-based tooling and automation for investigations, enrichment, response, and operational scale • Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks • Investigate security events end to end, including triage, scoping, containment support, and remediation follow-through • Support vulnerability management and operational security practices aligned with PCI and SOC 2 expectations • Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation

🎯 Requirements

• 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response • Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry • Ability to distinguish attacker behavior from normal production noise • Experience identifying malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts • Strong Python programming skills • Experience building and tuning detections in a SIEM or detection platform • Experience with observability and logging systems such as CloudWatch, Datadog, or similar platforms • Experience operating or supporting a vulnerability management program • Familiarity with Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases • Experience with at least one major cloud provider, preferably AWS • Working knowledge of identity and access systems and modern authentication flows • Understanding of security implications of internet-facing applications and APIs • Strong understanding of threat modeling, risk prioritization, and practical security controls • Practical experience using AI tools in security workflows • Judgment regarding AI risks including prompt injection, data leakage, excessive tool access, and weak auditability • Excellent analytical, communication, and cross-functional collaboration skills • United States work authorization required • Must disclose whether immigration sponsorship is required

🏖️ Benefits

• Stock options • Health benefits from Day 1 • 401(k) plan with company match • Remote-friendly (US) • Flexible time off (FTO) • Opportunities for growth • Inclusive, mission-driven culture • AI-assisted initial screen and interview process