Application Security Engineer, ONE
$180-220k
Offers equity
Ethical personal finance platform
Open for applications
Ethical personal finance platform
501-1000 employees
Open for applications
$180-220k
Offers equity
501-1000 employees
Company mission
To help people live healthier financial lives.
Role
Who you are
- 8–12 years’ experience in application security engineering, DevSecOps, or security platform engineering
- Deep familiarity with CVSS, MITRE ATT&CK frameworks, OWASP Top 10 and CWE taxonomy
- Proven experience with AWS core services: IAM, KMS, VPC, EC2, RDS, EKS
- Hands-on expertise in securing IaC and CI/CD pipelines; strong knowledge of policy-as-code tooling
- Container security experience: Docker, Kubernetes, EKS-related threat surfaces
- Solid threat modeling and secure code review skills; SAST/SCA tool proficiency
- Experience scripting automation (e.g. Python, Bash, PowerShell) to streamline AppSec tasks
- Capability to lead in-house AppSec frameworks or tooling development
- Strong communicator, able to translate technical findings to non-technical stakeholders
- Track record of defining and institutionalizing security architecture patterns
What the job involves
- Our Application Security Engineers play a pivotal role in safeguarding our platform, driving everything from designing secure AWS architectures to embedding automated threat detection that protects customer transactions
- Your work will ensure we meet rigorous compliance standards (PCI, CCPA, GLBA) and maintain the highest levels of trust and reliability for our users
- Architect and implement secure AWS configurations (IAM roles/policies, encryption keys, VPC segmentation)
- Embed security into CI/CD pipelines and repos using policy-as-code tools (pre-commit hooks, SAST/SCA, IDE tool integrations)
- Secure container and orchestration environments (EKS, Kubernetes, Docker) per best practices
- Conduct threat modeling sessions and risk‑driven design reviews early in development
- Perform secure code reviews and static/dynamic analysis; oversee remediation with dev teams
- Automate repetitive security tasks—vulnerability triage, code scanning, tool orchestration
- Build and extend in-house AppSec automation frameworks or pentest tooling
- Partner with security architecture and detection teams (SIEM tuning, logging, telemetry alignment)
- Develop and enforce AppSec standards and patterns across product teams; iterate through feedback loops
- Support regulatory or compliance assessments (PCI, CCPA, GLBA) as needed
Application process
- Initial Interview with Talent Partner
- Technical or Hiring Manager Interview
- Team Interview
- Executive Interview
- Offer!
Our take
Banks have a poor image and are often perceived to not care about their customers. ONE Finance has the financial well-being of its clients at the heart of what it does. Offering equal access to high-yield savings rates and affordable credit that grows. Its signature feature is the ability to organize money in multiple sub-accounts that ONE calls “Pockets,” whether to pay specific bills or save toward goals. You can also set up shared “Pockets” with partners or friends for joint saving objectives.
ONE is part of a new wave of digital banking apps that have the potential to disrupt traditional legacy systems, driven by European firms such as Triodos in the Netherlands. ONE Finance is clear that it doesn’t use deposits for anything that exploits the Earth's resources or is involved in the arms trade, setting it apart from other recent endeavours from Monzo and Revolut who aren’t so forthcoming about where its funds are invested.
In 2022, ONE was acquired by Hazel, a FinTech company which was launched by Walmart and Ribbit Capital and which also acquired Even Responsible Finance at the same time. The companies have merged under the ONE brand, combining workforces, products and operating budgets, and will benefit from Walmart's support and marketing reach.
Freddie
Company Specialist at Welcome to the Jungle
Insights
68% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$40m
SERIES B
Mar 2020
$17m
SERIES A
Total funding: $66m
Company benefits
- Benefits effective on day one
- Early access to a high potential, high growth fintech
- Generous stock option packages in an early-stage startup
- Remote friendly (anywhere in the US) and office friendly - you pick the schedule
- Flexible time off programs - vacation, sick, paid parental leave, and paid caregiver leave
- 401(k) plan with match
Company HQ
Civic Center, New York, NY
Leadership
Brian Hamilton
(Chief Commercial Officer)Started their career at Wells Fargo Foreign Exchange before leaving after almost 8 years to join Clear2Pay in 2006. They founded Isomer Labs, PushPoint, and Azlo before starting One as CEO in February 2019.
Share this job
View 31 more jobs at ONE