# Security and Threat Operations Engineer

**Company:** [OnePay](https://hotfix.jobs/companies/onepay)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $140k – $190k/yr
**Experience:** 5+ years
**Skills:** Python, SIEM, CloudWatch, Datadog, Wiz, AWS, Kubernetes, Threat Detection, Incident Response, Vulnerability Management, Threat Hunting, Threat Modeling, Identity Access Management, TypeScript, Node.js
**Posted:** 2026-09-11

> Protects a cloud-native fintech environment by building detections, investigating threats, operating vulnerability management, and automating security workflows. Requires 5+ years in security operations or related fields, strong Python skills, cloud experience, and expertise in telemetry-driven threat detection.

## Job Description

## Responsibilities
- Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
- Review API, authentication, and WAF traffic telemetry to identify malicious activity, abuse patterns, and anomalous behavior.
- Use AI for security triage, analysis, and workflow automation while helping define guardrails for AI-enabled systems.
- Operate vulnerability management workflows, including triage, prioritization, remediation tracking, and stakeholder coordination.
- Develop Python tooling and automation for investigations, enrichment, response, and operational scale.
- Translate threat models, security reviews, and product risks into production detections and response playbooks.
- Investigate security events end to end, including triage, scoping, containment support, and remediation follow-through.
- Support operational security practices aligned with PCI and SOC 2 expectations.
- Participate in threat hunting, detection improvement, and a 24x7 security incident response on-call rotation.

## Requirements
- 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response.
- Experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry.
- Ability to identify malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts.
- Strong Python programming skills for automation, enrichment, analysis, and security operations tooling.
- Experience building and tuning detections in a SIEM or detection platform.
- Experience with observability and logging systems such as CloudWatch or Datadog.
- Experience operating or supporting a vulnerability management program.
- Familiarity with Wiz and CNAPP, runtime, code, and vulnerability scanning use cases.
- Experience with a major cloud provider, preferably AWS.
- Working knowledge of identity and access systems, modern authentication flows, internet-facing applications, and APIs.
- Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments.
- Practical experience using AI tools in security workflows and understanding risks including prompt injection, data leakage, excessive tool access, and weak auditability.
- Strong analytical, communication, and cross-functional collaboration skills.

## Nice to Have
- Experience in a cloud-native or product-focused environment.
- Familiarity with Node.js, TypeScript, NestJS, Kubernetes, AWS, React Native, Claude Code, or Cursor.

## Compensation and Benefits
- Annual base salary of $140,000–$190,000.
- Stock options and health benefits from day one.
- 401(k) plan with company match.
- Remote-friendly within the United States.
- Flexible time off and growth opportunities.

## Similar jobs

- [Security Engineer 2 - Cyber Threat Intelligence](https://hotfix.jobs/jobs/dace61ec-d55c-4705-a07d-4371901a3ef0) - Datadog - New York, NY - $140k – $195k/yr
- [Security Scientist](https://hotfix.jobs/jobs/36a4a0c9-f833-41fb-bd29-ad40c4d5050f) - Figma - Remote - $140k – $348k/yr
- [Systems Engineer, Corporate Security](https://hotfix.jobs/jobs/60e4bbe5-986f-4cbb-a73c-f9ff000445bf) - Ramp - New York, NY - $144k – $199k/yr
- [Analyst, Privacy](https://hotfix.jobs/jobs/a897f8bc-44ea-42dd-bee6-ca5768c8084e) - Coinbase - Remote - $135k – $159k/yr
- [Security Engineer, Application Security](https://hotfix.jobs/jobs/902bb48a-e5f1-479e-b144-9fc1b0f431e0) - Writer - New York, NY - $132k – $258k/yr

**Apply:** https://hotfix.jobs/jobs/46f0222c-d121-4ecc-90c4-448c120484e0
**Canonical:** https://hotfix.jobs/jobs/46f0222c-d121-4ecc-90c4-448c120484e0