Threat Detection & Response Engineer

oneapp; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

OnePay, a leading consumer fintech, is seeking a Security and Threat Operations Engineer to translate production signals into detections, responses, and hardening efforts across our cloud-based platform. You will partner with product and platform security teams to identify risks, build detections, and drive remediation while maintaining a strong focus on security across APIs, identity, and infrastructure.

Applicants should have 5+ years in information security, strong Python skills, and

Qualifications

• 5+ years in information security, threat detection, or security operations.

Responsibilities

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
• Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior.
• Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems.
• Help operate OnePay's vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows.
• Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale.
• Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks.
• Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation.
• Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations.
• Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on‑call rotation.

Skills

Threat detection

Security operations

Python programming

Vulnerability management

Cloud security

SIEM tooling

WAF telemetry

AI in security

Incident response

Threat modeling

Tools

Node.js

TypeScript

NestJS

Job description

OnePay, a leading consumer fintech, is seeking a Security and Threat Operations Engineer to translate production signals into detections, responses, and hardening efforts across our cloud-based platform. You will partner with product and platform security teams to identify risks, build detections, and drive remediation while maintaining a strong focus on security across APIs, identity, and infrastructure.

Applicants should have 5+ years in information security, strong Python skills, and