Security and Threat Operations Engineer

About this role

OnePay seeks a Security and Threat Operations Engineer to protect its fintech platform by building detections, investigating security events, and automating threat response across cloud and application environments. You'll work cross-functionally to translate threats into actionable monitoring, manage vulnerabilities, and maintain compliance with PCI and SOC 2 standards.

What you'll do

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments
• Analyze traffic patterns in APIs, authentication, and WAF telemetry to identify malicious activity and anomalies
• Develop Python-based automation and tooling for investigations, enrichment, and operational scaling
• Triage and prioritize vulnerability findings from Wiz and scanning tools to drive remediation
• Conduct end-to-end investigation of security events including containment and follow-up remediation
• Participate in threat hunting, detection tuning, and 24x7 incident response on-call rotation

What they're looking for

• Threat detection and incident response (5+ years)
• Python programming for automation and tooling
• SIEM and detection platform configuration
• Cloud security (AWS preferred) and cloud-native environments
• API and authentication security analysis
• Vulnerability management and triage
• Observability platforms (CloudWatch, Datadog)
• Threat modeling and risk prioritization