Remote Threat Operations Engineer — FinTech Security Innovator

Apply; Northern (KY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Stock options

Remote-friendly

Flexible time off

Growth opportunities

Job summary

OnePay is seeking a Security and Threat Operations Engineer to protect our fast-moving fintech platform. You will turn production signals into detections, responses, and hardening initiatives across cloud, application, identity, and edge environments.

You will build detections, triage threats, and drive remediation with Product and Platform Security teams. Strong Python skills and AWS experience are essential; remote-friendly US-based work is available.

Qualifications

• 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment.

Responsibilities

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
• Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior.
• Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems.
• Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows.
• Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale.
• Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks.
• Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation.
• Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations.
• Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation.

Skills

Information security

Threat detection

Security operations

Detection engineering

Incident response

Python programming

SIEM experience

CloudWatch / Datadog

Cloud platforms

AWS

Tools

Wiz

CloudWatch

Datadog

Kubernetes

AWS

Job description

OnePay is seeking a Security and Threat Operations Engineer to protect our fast-moving fintech platform. You will turn production signals into detections, responses, and hardening initiatives across cloud, application, identity, and edge environments.

You will build detections, triage threats, and drive remediation with Product and Platform Security teams. Strong Python skills and AWS experience are essential; remote-friendly US-based work is available.