Product Security Engineer - Remote

Overview

As a Product Security Engineer at OnePay, you'll be responsible for ensuring secure and reliable applications at scale, partnering with engineers to integrate security from the ground up.

In Short

• Architect and implement secure AWS configurations.
• Secure CI/CD pipelines and integrate policy-as-code tools.
• Enhance container and orchestration security.
• Conduct threat modeling exercises.
• Perform secure code reviews and leverage SAST/SCA tools.
• Automate routine security tasks using scripting languages.
• Develop and maintain application security testing frameworks.
• Work with teams to maintain a comprehensive security architecture.

Requirements

• 10+ years in security engineering, DevSecOps, and application development.
• Knowledge of CVSS, MITRE ATT&CK, and OWASP Top 10.
• Understanding of AWS core services.
• Experience securing IaC and CI/CD pipelines.
• Knowledge of container security and orchestration platforms.
• Experience in application security practices.
• Familiarity with detection engineering and scripting automation.
• Experience defining security architecture patterns.
• Understanding of regulatory compliance concerns is preferred.

Benefits

• Competitive base salary and stock options.
• 401(k) plan with company match.
• Remote-friendly and flexible time off.
• Inclusive culture with real impact.