Product Security Engineer - Remote

Overview

As a Product Security Engineer at One, you'll be responsible for ensuring that the company delivers secure and reliable applications at scale, partnering with engineers to build security into the product from the ground up.

In Short

• Architect secure AWS configurations.
• Secure CI/CD pipelines and code repositories.
• Enhance container and orchestration security.
• Conduct threat modeling exercises.
• Perform secure code reviews.
• Automate routine security tasks.
• Develop and maintain application security frameworks.
• Collaborate with engineering teams on security architecture.

Requirements

• 10+ years in security engineering and application development.
• Knowledge of CVSS, MITRE ATT&CK, and OWASP Top 10.
• Understanding of AWS core services.
• Experience securing IaC and CI/CD pipelines.
• Knowledge of container security best practices.
• Experience in application security and penetration testing.
• Familiarity with SIEM tuning and scripting automation.
• Experience in modern application architecture.
• Ability to communicate security concepts effectively.
• Understanding of regulatory compliance concerns.

Benefits

• Competitive cash compensation.
• Benefits effective on day one.
• Early access to a high potential fintech.
• Generous stock option packages.
• Remote friendly and flexible work schedule.
• Flexible time off programs.
• 401(k) plan with match.