Security Platform Engineer

OnePay

92d

About The Position

As a Security Platform Engineer at OnePay, you’ll support the security of our platform by helping embed secure practices across development and cloud environments. In this role, you’ll contribute to security reviews, automation, and compliance efforts that protect our customers and ensure trust. You will assist in designing and validating secure AWS configurations (IAM roles, encryption, VPC segmentation), support integration of security checks into CI/CD pipelines using policy-as-code tools and automation, and contribute to securing containerized environments (Docker, Kubernetes, EKS) following best practices. Additionally, you will participate in threat modeling, code reviews, and static/dynamic analysis alongside senior engineers, help automate repetitive AppSec tasks like vulnerability scanning and triage, and document and promote secure development patterns across product teams.

Requirements

• 4+ years’ experience in application security engineering, DevSecOps, or security platform engineering
• Familiarity with common security frameworks and taxonomies (OWASP Top 10, CWE, CVSS, MITRE ATT&CK)
• Exposure to AWS services (IAM, KMS, VPC, EC2, RDS, EKS) or cloud security fundamentals
• Hands-on experience with code scanning or SAST/SCA tools
• Scripting skills (Python, Bash, or similar) to support automation
• Strong interest in learning modern AppSec practices and growing technical depth
• Drive and proactivity - everyone here is a builder and executor.

Responsibilities

• Assist in designing and validating secure AWS configurations (IAM roles, encryption, VPC segmentation)
• Support integration of security checks into CI/CD pipelines using policy-as-code tools and automation
• Contribute to securing containerized environments (Docker, Kubernetes, EKS) following best practices
• Participate in threat modeling, code reviews, and static/dynamic analysis alongside senior engineers
• Help automate repetitive AppSec tasks like vulnerability scanning and triage
• Document and promote secure development patterns across product teams.

Benefits

• Competitive base salary, stock options, and health benefits from Day 1
• 401(k) plan with company match
• Remote-friendly (US), flexible time off (FTO), and opportunities for growth
• A high-growth, mission-driven, inclusive culture where your work has real impact.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level