Security Platform Engineer - Remote

Overview

As a Security Platform Engineer at OnePay, you’ll support the security of our platform by helping embed secure practices across development and cloud environments.

In Short

• Assist in designing and validating secure AWS configurations (IAM roles, encryption, VPC segmentation).
• Support integration of security checks into CI/CD pipelines using policy-as-code tools and automation.
• Contribute to securing containerized environments (Docker, Kubernetes, EKS) following best practices.
• Participate in threat modeling, code reviews, and static/dynamic analysis alongside senior engineers.
• Help automate repetitive AppSec tasks like vulnerability scanning and triage.
• Document and promote secure development patterns across product teams.

Requirements

• 4+ years’ experience in application security engineering, DevSecOps, or security platform engineering.
• Familiarity with common security frameworks and taxonomies (OWASP Top 10, CWE, CVSS, MITRE ATT&CK).
• Exposure to AWS services (IAM, KMS, VPC, EC2, RDS, EKS) or cloud security fundamentals.
• Hands-on experience with code scanning or SAST/SCA tools.
• Scripting skills (Python, Bash, or similar) to support automation.
• Strong interest in learning modern AppSec practices and growing technical depth.
• Drive and proactivity - everyone here is a builder and executor.

Benefits

• Competitive base salary, stock options, and health benefits from Day 1.
• 401(k) plan with company match.
• Remote-friendly (US), flexible time off (FTO), and opportunities for growth.
• A high-growth, mission-driven, inclusive culture where your work has real impact.