Apply on Employer Site

OnePay · 4 hours ago

Application Security Engineer

United States

Full-time

Remote

Senior Level, Lead/Staff

8+ years exp

OnePay is an all-in-one financial platform aimed at improving the financial well-being of Americans. The Application Security Engineer will play a crucial role in safeguarding the platform by designing secure AWS architectures and embedding automated threat detection to protect customer transactions while ensuring compliance with rigorous standards.

Responsibilities

Architect and implement secure AWS configurations (IAM roles/policies, encryption keys, VPC segmentation)

Embed security into CI/CD pipelines and repos using policy-as-code tools (pre-commit hooks, SAST/SCA, IDE tool integrations)

Secure container and orchestration environments (EKS, Kubernetes, Docker) per best practices

Conduct threat modeling sessions and risk‑driven design reviews early in development

Perform secure code reviews and static/dynamic analysis; oversee remediation with dev teams

Automate repetitive security tasks—vulnerability triage, code scanning, tool orchestration

Build and extend in-house AppSec automation frameworks or pentest tooling

Partner with security architecture and detection teams (SIEM tuning, logging, telemetry alignment)

Develop and enforce AppSec standards and patterns across product teams; iterate through feedback loops

Support regulatory or compliance assessments (PCI, CCPA, GLBA) as needed

Qualification

AWS security configurationsCI/CD security integrationContainer securityThreat modelingApplication security engineeringSAST/SCA toolsAutomation scriptingSecurity architecture patternsCommunication