Responsibilities
- Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
- Review API, authentication, WAF, and infrastructure telemetry to identify malicious activity, abuse, and anomalous behavior.
- Use AI for security triage, analysis, and workflow automation while helping define guardrails for AI-enabled systems.
- Operate vulnerability management workflows, including triage, prioritization, remediation tracking, and stakeholder coordination.
- Develop Python tooling and automation for investigations, enrichment, response, and operational scale.
- Translate threat models, security reviews, and product risks into production detections and response playbooks with Product Security.
- Investigate security events through triage, scoping, containment support, and remediation follow-through.
- Support security practices aligned with PCI and SOC 2 expectations.
- Conduct threat hunting, improve detections, and participate in a 24x7 security incident response on-call rotation.
Requirements
- 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment.
- Strong experience investigating web, API, authentication, and infrastructure telemetry and distinguishing attacker behavior from normal production noise.
- Experience identifying malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts from traffic and event patterns.
- Strong Python programming skills for automation, enrichment, analysis, and security operations tooling.
- Experience building and tuning detections in a SIEM or detection platform and working with systems such as CloudWatch or Datadog.
- Experience operating or supporting vulnerability management programs, including triage, prioritization, remediation tracking, and stakeholder coordination.
- Familiarity with Wiz and cloud and application security findings, including CNAPP, runtime, code, and vulnerability scanning use cases.
- Experience with at least one major cloud provider, preferably AWS.
- Working knowledge of identity and access systems, modern authentication flows, and security implications of internet-facing applications and APIs.
- Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments.
- Practical experience using AI tools in security workflows and understanding risks such as prompt injection, data leakage, excessive tool access, and weak auditability.
- Excellent analytical, communication, and cross-functional collaboration skills, plus a proactive execution-oriented approach.
Benefits
- Competitive salary, stock options, and benefits from Day 1.
- Comprehensive health, accident, disability, and term life insurance, including mental health support and wellness programs.
- Hybrid work model based in the Bengaluru office three days a week.
- Vacation, sick leave, other paid leave programs, and paid regional holidays.
- Monthly transport and work-from-home allowances.
- High-growth, mission-driven, and inclusive culture.
Tech Stack
Categories
About OnePay
At OnePay, we believe that better money makes life better. We also believe the future of financial services is meeting consumers where they already are — in their daily lives, workplaces, and communities nationwide. With banking, high-yield savings, credit cards, point-of-sale lending, investment and crypto offerings, OnePay is providing millions of consumers with the tools they need to holistically manage their financial lives all in one place. Alongside its fast-growing consumer offering, OnePay also partners with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers. Through its B2B financial wellness suite, OnePay consolidates savings, spending, and credit tools into one platform, complementing or unifying existing benefits to improve employee stability, engagement, and productivity. Backed by Ribbit Capital and Walmart, OnePay has a 4.9★ app rating, is growing quickly, and is always looking for talented people to join our team. Learn more at www.onepay.com. OnePay is a financial technology company, not a bank. Banking services provided by Coastal Community Bank or Lead Bank, Members FDIC.