Application Security Engineer - Remote

Overview

OnePay is a consumer financial services app with an exceedingly simple mission: to help people achieve financial progress.

In Short

• Architect and implement secure AWS configurations.
• Embed security into CI/CD pipelines and repos using policy-as-code tools.
• Secure container and orchestration environments.
• Conduct threat modeling sessions and risk-driven design reviews.
• Perform secure code reviews and oversee remediation.
• Automate repetitive security tasks.
• Build and extend in-house AppSec automation frameworks.
• Partner with security architecture and detection teams.
• Develop and enforce AppSec standards across product teams.
• Support regulatory or compliance assessments as needed.

Requirements

• 8–12 years’ experience in application security engineering.
• Deep familiarity with CVSS, MITRE ATT&CK frameworks, OWASP Top 10.
• Proven experience with AWS core services.
• Hands-on expertise in securing IaC and CI/CD pipelines.
• Container security experience with Docker and Kubernetes.
• Solid threat modeling and secure code review skills.
• Experience scripting automation to streamline AppSec tasks.
• Capability to lead in-house AppSec frameworks or tooling development.
• Strong communicator with technical findings.
• Track record of defining security architecture patterns.

Benefits

• Work with a mission-driven team.
• Opportunity to shape the future of financial services.
• Competitive salary and benefits.
• Collaborative work environment.
• Access to cutting-edge technology.