Security and Threat Operations Engineer

About the role

As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment. You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams.

What you'll do

• Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments
• Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior
• Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems
• Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale
• Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks

What you need

• 5–9 yrs of experience
• Vulnerability assessment
• Incident response
• SIEM
• Python
• AWS
• Datadog
• Any graduate

Good to have

• NestJS
• iOS
• React Native
• TypeScript
• Microservices
• Kubernetes