Security & Threat Operations Engineer, ONE
$140-190k
+ Equity
All-in-one financial platform
Be an early applicant
All-in-one financial platform
1001+ employees
Be an early applicant
$140-190k
+ Equity
1001+ employees
Company mission
To make money better in America.
Role
Who you are
- 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment
- Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise
- Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts
- Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling
- Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms
- Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination
- Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases
- Experience with at least one major cloud provider, preferably AWS
- Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs
- Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments
- Practical experience using AI tools in security workflows, along with sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability
- Excellent analytical, communication, and cross-functional collaboration skills, especially in environments where security needs to move quickly with product and engineering teams
- Drive and proactivity - everyone here is a builder and executor
What the job involves
- As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment
- You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams
- Your efforts will enable us to proactively identify, monitor, and stop compromised behaviors across OnePay's products and infrastructure, ensuring the continued safety and trust of our business and customers
- Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments
- Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior
- Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems
- Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows
- Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale
- Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks
- Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation
- Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations
- Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation
- We use Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS
- On the client side, we build and ship product features for iOS, Android, and web platforms using React Native
- We also embrace AI-assisted development, so engineers have their choice of Claude Code or Cursor to fit their workflow
- While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly
Application process
- Our process varies by role. Most candidates go through:
- AI-assisted initial screen
- Interview with Talent Partner
- Technical or Hiring Manager Interview
- Team Interview
- Executive Interview
- Offer!
Our take
Traditional banking hasn't worked for millions of Americans who are underserved or priced out of the system. High fees, minimum balance requirements, and tough credit checks create barriers that keep everyday people from building financial stability. Meanwhile, fintech startups are proving there's a huge demand for simpler, more accessible financial services. But most of these apps still focus on just one or two features, forcing users to juggle multiple platforms to manage their money.
OnePay is Walmart's all-in-one financial platform bringing everything together in a single app. Launched in 2021 through a partnership with Ribbit Capital, OnePay expanded after Walmart acquired fintechs Even and ONE in 2022. The platform now includes buy-now-pay-later and, through a new DriveWealth partnership, stock and ETF investing. On top of this, OnePay also serves employers with a B2B financial wellness suite to improve employee stability and engagement.
OnePay is already helping millions of consumers and has earned a 4.8-star app rating. More recently it announced crypto trading for Bitcoin and Ether, and partnerships with Workday Wellness and Klarna, further expanding its offerings. With this momentum, the platform is really positioning itself as a true one-stop financial hub.
Freddie
Company Specialist at Welcome to the Jungle
Insights
68% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$40m
SERIES B
Mar 2020
$17m
SERIES A
Total funding: $66m
Company benefits
- Competitive health benefits: Medical, dental, and vision plans, pluss wellness perks.
- Flexible time off: Rest, recharge, repeat.
- Paid employee leave: Sick, personal, caregiver, bereavement, ans parental.
- 401k plan: With employer match.
- Monthly work-from-home stipend: To cover those home office expenses.
- Remote-first culture: Work anywhere in the US.
Company HQ
Civic Center, New York, NY
Leadership
Omer Ismail
(CEO)Prior to becoming OnePay's CEO in 2021, Omer spent 17 years at Goldman Sachs as a Partner.
Share this job
View 30 more jobs at ONE