Application Security Engineer at Oneapp

Oneapp

United States (Remote)·2d ago

Mid LevelFull-timeTypeScriptPythonRustReactAWSKubernetesDockerCI/CD

Salary Range

$102,000 - $138,000 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Application Security Engineer to join our team at OnePay, a consumer fintech trusted by millions of Americans. This role involves safeguarding our platform and ensuring compliance with rigorous standards like PCI, CCPA, and GLBA.

Key Responsibilities

→Architect and implement secure AWS configurations
→Embed security into CI/CD pipelines using policy-as-code tools
→Secure container and orchestration environments
→Conduct threat modeling sessions and risk-driven design reviews
→Perform secure code reviews and static/dynamic analysis
→Automate repetitive security tasks
→Build and extend in-house AppSec automation frameworks
→Partner with security architecture and detection teams
→Develop and enforce AppSec standards across product teams
→Support regulatory or compliance assessments

Requirements

✓8–12 years’ experience in application security engineering
✓Deep familiarity with CVSS, MITRE ATT&CK frameworks, OWASP Top 10
✓Proven experience with AWS core services
✓Hands-on expertise in securing IaC and CI/CD pipelines
✓Container security experience with Docker, Kubernetes, EKS
✓Solid threat modeling and secure code review skills
✓Experience scripting automation with Python, Bash, PowerShell
✓Capability to lead in-house AppSec frameworks or tooling development
✓Strong communicator, able to translate technical findings to non-technical stakeholders
✓Track record of defining and institutionalizing security architecture patterns