Product Security Engineer, ONE
$175-220k
+ Stock options
Ethical personal finance platform
Job no longer available
Ethical personal finance platform
501-1000 employees
Job no longer available
$175-220k
+ Stock options
501-1000 employees
Company mission
To help people live healthier financial lives.
Role
Who you are
- 10+ years of experience in security engineering, DevSecOps, and application development
- Excellent knowledge of the CVSS, MITRE ATT&CK, and OWASP Top 10
- Practical understanding of AWS and its core services (VPC, EC2, RDS)
- Hands-on experience securing IaC and CI/CD pipelines, including code scanning and policy enforcement tools
- Strong knowledge of container security best practices and orchestration platforms
- Practical experience in application security, including threat modeling, secure code review, and penetration testing
- Familiarity with detection engineer, SIEM tuning, and scripting automation
- Demonstrated experience in modern application architecture and deployment practices
- Expertise in verifying and measuring common security vulnerabilities, and demonstrated ability to communicate these concepts to technical and non-technical partners
- Experience defining security architecture patterns and standards
- Preferably, understanding of regulatory compliance concerns (GLBA, CCPA, PCI)
- The Triple H Factor: Humble, Hungry and Honest
What the job involves
- As a Product Security Engineer, you'll be responsible for ensuring that One delivers secure and reliable applications at scale. By partnering with engineers to build security into the product from the ground up
- By partnering with engineers to build security into the product from the ground up, you’ll be creating engineering tools and workflows that test and validate artifacts and actively developing security frameworks
- You’ll provide subject-matter expertise to product teams regarding security best practices, optimize our secure coding practices, and use offensive security techniques to harden our environment and help improve our overall security posture
- Come be the champion of modern Product Security Engineering at One and have a direct impact on the security of all of our products!
- Architecting and implementing secure AWS configurations, including IAM policies, encryption, and network segmentation
- Securing CI/CD pipelines and code repositories, integrating policy-as-code tools to enforce security standards
- Enhancing container and orchestration security (Docker, Kubernetes, EKS) to ensure safe and reliable production environments
- Conducting threat modeling exercises to identify and addressing risks in early stages of development
- Performing secure code reviews, leveraging SAST/SCA tools, and guiding remediation with development teams
- Automating routine security tasks using scripting languages, improving efficiency and accuracy
- Developing, maintaining, and extending our in-house application security and penetration testing automated testing framework
- Working with the Security and other engineering teams to maintain a security architecture that provides security controls throughout all platforms to mitigate risk, and to meet goals and regulatory requirements
Our take
Banks have a poor image and are often perceived to not care about their customers. ONE Finance has the financial well-being of its clients at the heart of what it does. Offering equal access to high-yield savings rates and affordable credit that grows. Its signature feature is the ability to organize money in multiple sub-accounts that ONE calls “Pockets,” whether to pay specific bills or save toward goals. You can also set up shared “Pockets” with partners or friends for joint saving objectives.
ONE is part of a new wave of digital banking apps that have the potential to disrupt traditional legacy systems, driven by European firms such as Triodos in the Netherlands. ONE Finance is clear that it doesn’t use deposits for anything that exploits the Earth's resources or is involved in the arms trade, setting it apart from other recent endeavours from Monzo and Revolut who aren’t so forthcoming about where its funds are invested.
In 2022, ONE was acquired by Hazel, a FinTech company which was launched by Walmart and Ribbit Capital and which also acquired Even Responsible Finance at the same time. The companies have merged under the ONE brand, combining workforces, products and operating budgets, and will benefit from Walmart's support and marketing reach.
Freddie
Company Specialist at Welcome to the Jungle
Insights
68% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$40m
SERIES B
Mar 2020
$17m
SERIES A
Total funding: $66m
Company benefits
- Benefits effective on day one
- Early access to a high potential, high growth fintech
- Generous stock option packages in an early-stage startup
- Remote friendly (anywhere in the US) and office friendly - you pick the schedule
- Flexible time off programs - vacation, sick, paid parental leave, and paid caregiver leave
- 401(k) plan with match
Company HQ
Civic Center, New York, NY
Leadership
Brian Hamilton
(Chief Commercial Officer)Started their career at Wells Fargo Foreign Exchange before leaving after almost 8 years to join Clear2Pay in 2006. They founded Isomer Labs, PushPoint, and Azlo before starting One as CEO in February 2019.
Share this job
View 18 more jobs at ONE