Product Security Engineer, ONE
$175-220k
+ Stock options
All-in-one financial platform
Job no longer available
All-in-one financial platform
1001+ employees
Job no longer available
$175-220k
+ Stock options
1001+ employees
Company mission
To help people live healthier financial lives.
Role
Who you are
- 10+ years of experience in security engineering, DevSecOps, and application development
- Excellent knowledge of the CVSS, MITRE ATT&CK, and OWASP Top 10
- Practical understanding of AWS and its core services (VPC, EC2, RDS)
- Hands-on experience securing IaC and CI/CD pipelines, including code scanning and policy enforcement tools
- Strong knowledge of container security best practices and orchestration platforms
- Practical experience in application security, including threat modeling, secure code review, and penetration testing
- Familiarity with detection engineer, SIEM tuning, and scripting automation
- Demonstrated experience in modern application architecture and deployment practices
- Expertise in verifying and measuring common security vulnerabilities, and demonstrated ability to communicate these concepts to technical and non-technical partners
- Experience defining security architecture patterns and standards
- Preferably, understanding of regulatory compliance concerns (GLBA, CCPA, PCI)
- The Triple H Factor: Humble, Hungry and Honest
What the job involves
- As a Product Security Engineer, you'll be responsible for ensuring that One delivers secure and reliable applications at scale. By partnering with engineers to build security into the product from the ground up
- By partnering with engineers to build security into the product from the ground up, you’ll be creating engineering tools and workflows that test and validate artifacts and actively developing security frameworks
- You’ll provide subject-matter expertise to product teams regarding security best practices, optimize our secure coding practices, and use offensive security techniques to harden our environment and help improve our overall security posture
- Come be the champion of modern Product Security Engineering at One and have a direct impact on the security of all of our products!
- Architecting and implementing secure AWS configurations, including IAM policies, encryption, and network segmentation
- Securing CI/CD pipelines and code repositories, integrating policy-as-code tools to enforce security standards
- Enhancing container and orchestration security (Docker, Kubernetes, EKS) to ensure safe and reliable production environments
- Conducting threat modeling exercises to identify and addressing risks in early stages of development
- Performing secure code reviews, leveraging SAST/SCA tools, and guiding remediation with development teams
- Automating routine security tasks using scripting languages, improving efficiency and accuracy
- Developing, maintaining, and extending our in-house application security and penetration testing automated testing framework
- Working with the Security and other engineering teams to maintain a security architecture that provides security controls throughout all platforms to mitigate risk, and to meet goals and regulatory requirements
Our take
Traditional banking hasn't worked for millions of Americans who are underserved or priced out of the system. High fees, minimum balance requirements, and tough credit checks create barriers that keep everyday people from building financial stability. Meanwhile, fintech startups are proving there's a huge demand for simpler, more accessible financial services. But most of these apps still focus on just one or two features, forcing users to juggle multiple platforms to manage their money.
OnePay is Walmart's all-in-one financia platform bringing everything together in a single app. Launched in 2021 through a partnership with Ribbit Capital, OnePay expanded after Walmart acqwuired fintechs Even and ONE in 2022. The platform now includes buy-now-pay-later and, through a new DriveWealth partnership, stock and ETF investing. On top of this, OnePay also serves employers with a B2B financial wellness suite to improve employee stability and engagement.
OnePay is already helping millions of consumers and has earned a 4.8-star app rating. And recently it announced crypto trading for Bitcoin and Ether, further expanding its offerings. With this momentum, the platform is really positioning itself as a true one-stop financial hub.
Freddie
Company Specialist at Welcome to the Jungle
Insights
68% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$40m
SERIES B
Mar 2020
$17m
SERIES A
Total funding: $66m
Company benefits
- Competitive health benefits: Medical, dental, and vision plans, pluss wellness perks.
- Flexible time off: Rest, recharge, repeat.
- Paid employee leave: Sick, personal, caregiver, bereavement, ans parental.
- 401k plan: With employer match.
- Monthly work-from-home stipend: To cover those home office expenses.
- Remote-first culture: Work anywhere in the US.
Company HQ
Civic Center, New York, NY
Leadership
Omer Ismail
(CEO)Prior to becoming OnePay's CEO in 2021, Omer spent 17 years at Goldman Sachs as a Partner.
Share this job
View 27 more jobs at ONE