ONE Finance
Security and Threat Operations Engineer
$140K–$190K
United States (Remote) · Remote · Full-time · Posted Sep 11, 2026
- Experience
- 5+ years in information security, threat detection, security operations, detection engineering, or incident response.
About the job
Build and improve security detections, investigate threats, support vulnerability remediation, and strengthen security operations across OnePay’s products and infrastructure.
What you'll do
- Build and tune monitoring, detections, and alerts; investigate security events and support containment and remediation.
- Operate vulnerability management, including triage, prioritization, and remediation tracking; support PCI and SOC 2-aligned practices.
- Develop Python automation, conduct threat hunting, and participate in a 24x7 incident response on-call rotation.
What they ask for
- 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response.
- Strong Python programming skills and experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry.
- Experience building detections in a SIEM or detection platform and supporting vulnerability management.
- Experience with at least one major cloud provider; practical use of AI tools in security workflows and understanding of AI-specific risks.
Nice to have
- Experience in a cloud-native or product-focused environment.
- AWS is preferred; familiarity with Wiz, CloudWatch, or Datadog is relevant.
Pay
$140K – $190K USD base salary
Tools
Python, Wiz, CloudWatch, Datadog, AWS, Node, TypeScript, Kubernetes
AI focus
Use AI for security triage, analysis, and workflow automation; help define guardrails for AI-enabled systems and account for risks such as prompt injection and data leakage.
Model-written summary · the original posting is authoritative