Remote Threat Operations Engineer: Cloud Security & IR

Remote Genie; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Stock options

401(k) match

Remote-friendly

Job summary

OnePay is seeking a Security and Threat Operations Engineer to protect a fast-moving fintech environment. You will turn production signals into detections, responses, and hardening initiatives, partnering with Product and Platform Security to safeguard the product and users.

Responsibilities include building detections, reviewing API traffic, and driving remediation with Wiz and vulnerability programs. You will use Python for automation, work across cloud, identity, and edge environments, and

Qualifications

• 5+ years in information security, threat detection, or incident response.
• Experience with web/API/infrastructure telemetry and attacker behavior.
• Strong Python for automation, enrichment, and tooling.
• Experience building detections in a SIEM and with observability tools.
• Familiarity with Wiz CNAPP and vulnerability scanning use cases.
• Experience with at least one major cloud provider (AWS).
• Understanding of identity, access, and modern authentication concepts.
• Knowledge of threat modeling and risk prioritization.
• Practical AI use in security workflows and risk considerations.

Responsibilities

• Build and tune detections, alerts, and monitoring across cloud, application, identity, and edge.
• Review traffic patterns across APIs, auth flows, and WAF telemetry for anomalies.
• Develop Python tooling to improve investigations, enrichment, and response.
• Operate vulnerability management, triage, remediation tracking, and Wiz workflows.
• Collaborate with Product Security to translate threat models into detections.
• Investigate security events end to end, including containment and remediation follow-up.
• Support security practices aligned with PCI and SOC 2 expectations.
• Participate in threat hunting and 24x7 incident response on-call rotation.

Skills

Python

Threat detection

Cloud security

SIEM

AWS

Tools

Wiz

CloudWatch

Datadog

Kubernetes

AWS

TypeScript

Job description

OnePay is seeking a Security and Threat Operations Engineer to protect a fast-moving fintech environment. You will turn production signals into detections, responses, and hardening initiatives, partnering with Product and Platform Security to safeguard the product and users.

Responsibilities include building detections, reviewing API traffic, and driving remediation with Wiz and vulnerability programs. You will use Python for automation, work across cloud, identity, and edge environments, and