Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
Already have an account?
Join 250,000+ professionals and teams at Microsoft, Shopify, and even NASA. đ
Already have an account? Login
Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.
1 What roles are you open to?
2 Experience level
3 Work style
Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.
Category
Leads a penetration testing team conducting continuous security assessments using AI-powered tools and human oversight.
Designs and implements threat intelligence strategies to identify, analyze, and mitigate security threats across the platform infrastructure.
Audits IT systems and controls for compliance, identifies security vulnerabilities, and ensures adherence to organizational and regulatory standards.
Lead and build Snorkel's security function end-to-end, including infrastructure, application, and compliance, while hiring and scaling the security team.
About Snorkel
At Snorkel, we believe meaningful AI doesnât start with the model, it starts with the data.
Weâre on a mission to help enterprises transform expert knowledge into specialized AI at scale. The AI landscape has gone through incredible changes since 2015, when Snorkel started as a research project in the Stanford AI Lab, to the generative AI breakthroughs of today. But one thing has remained constant: the data you use to build AI is the key to achieving differentiation, high performance, and production-ready systems. We work with some of the worldâs largest organizations to empower scientists, engineers, financial experts, product creators, journalists, and more to build custom AI with their data faster than ever before. Excited to help us redefine how AI is built? Apply to be the newest Snorkeler!
Snorkel AI is the frontier AI data lab, helping teams build the data and environments behind high-performing frontier and agentic AI. We combine technology with research-driven AI data development to create datasets, benchmarks, evals, and custom solutions for real-world AI systems. Founded out of the Stanford AI Lab in 2019, Snorkel works with leading AI labs and enterprises to move from better data to better outcomes.
Excited to help us redefine how AI is built? Apply to be the newest Snorkeler!
Snorkel is hiring a Head of Security to build and lead our security function end-to-end â infrastructure security, application security, and governance, risk & compliance (GRC). Youâll own the security function end-to-end â strategy, team, and execution â and operate as the primary security voice with customers, auditors, and the exec team. Youâll report to the CTO.
This is a builderâs role: youâll take security from its current state to a mature, right-sized function as Snorkel scales, hiring and developing the team as needs grow.
Why This Role
Youâll have meaningful ownership over the infrastructure that determines how quickly Snorkel can experiment with, evaluate, and productionize new AI systems. This isnât a role focused on training a single model or maintaining traditional ML pipelines - youâll build the platform that makes large-scale AI experimentation possible.
Youâll work on some of the hardest emerging infrastructure problems in AI: operating non-deterministic systems reliably, reproducing agent behavior across environments, evaluating long-running trajectories, scaling simulations and experiments, and turning rapidly evolving research workflows into robust production systems.
The architecture decisions made by this team will define how Snorkel builds and operates AI systems for years to come.
Snorkel is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. Snorkel embraces diversity and provides equal employment opportunities to all employees and applicants for employment.
Actual compensation will be determined based on factors including skills, qualifications, experience, and geographic location.
Be Your Best at Snorkel
Joining Snorkel AI means becoming part of a company that has market proven solutions, robust funding, and is scaling rapidlyâoffering a unique combination of stability and the excitement of high growth. As a member of our team, youâll have meaningful opportunities to shape priorities and initiatives, influence key strategic decisions, and directly impact our ongoing success. Whether youâre looking to deepen your technical expertise, explore leadership opportunities, or learn new skills across multiple functions, youâre fully supported in building your career in an environment designed for growth, learning, and shared success.
Snorkel AI is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. Snorkel AI embraces diversity and provides equal employment opportunities to all employees and applicants for employment. Snorkel AI prohibits discrimination and harassment of any type on the basis of race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law. All employment is decided on the basis of qualifications, performance, merit, and business need.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Actual compensation will be determined based on factors including skills, qualifications, experience, and geographic location.
Salary range(s) for this role
$252,000â$370,000 USD
Be Your Best at Snorkel
Joining Snorkel AI means becoming part of a company that has market proven solutions, robust funding, and is scaling rapidlyâoffering a unique combination of stability and the excitement of high growth. As a member of our team, youâll have meaningful opportunities to shape priorities and initiatives, influence key strategic decisions, and directly impact our ongoing success. Whether youâre looking to deepen your technical expertise, explore leadership opportunities, or learn new skills across multiple functions, youâre fully supported in building your career in an environment designed for growth, learning, and shared success.
Snorkel AI is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. Snorkel AI embraces diversity and provides equal employment opportunities to all employees and applicants for employment. Snorkel AI prohibits discrimination and harassment of any type on the basis of race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law. All employment is decided on the basis of qualifications, performance, merit, and business need.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
Manages IT security operations and strategies for a globally distributed team across Portugal/Poland regions.
Conducts penetration testing and security assessments as part of a skilled pentester community.
Conducts penetration testing and security assessments as part of a specialized pentester community across UK, Germany, and Nordic regions.
Manages governance, risk, and compliance programs to ensure organizational adherence to regulatory standards and security policies.
Designs, implements, and maintains cloud security infrastructure and protocols to protect institutional real estate platforms and data systems.
Conducts security research on blockchain protocols and smart contracts, communicating findings to external stakeholders and the Web3 community.
Monitors and defends against cyber threats, analyzes security incidents, and implements defensive measures to protect enterprise systems and infrastructure.
Researches and identifies software vulnerabilities in open source code and dependencies to help organizations manage security risks.
Manages security operations, monitors infrastructure for threats, responds to incidents, and maintains security compliance systems.
Supports personnel security operations by processing vetting applications, monitoring clearances, liaising with external agencies, and maintaining security compliance controls.
Today, Assystem is among the top three independent nuclear engineering firms worldwide. With over 60 years of experience in highly regulated sectors, the group supports public and industrial stakeholders in the execution of complex and strategic infrastructure projects, subject to high safety and security requirements.
Assystem mobilizes 8,000 experts in 13 countries and intervenes across the entire project lifecycle, in engineering, project management and digital solutions.
đ Security Assistant
Reporting to the Personnel Security Manager, the Security Assistant will support the companyâs Personnel Security activities, with a focus on security vetting, aftercare and security compliance.
đ Location: Bolton
đ˘Â Working pattern: Hybrid â 2â3 days per week in the office
đš Key Responsibilities
đĄď¸ Process vetting applications for staff and contractors, providing guidance on all types of vetting.
đ Monitor security clearances and ensure renewals are completed promptly.
đ Communicate changes to vetting policies and procedures.
đ¤ Liaise with external agencies and verify internal and external clearances.
đ Conduct thorough checks and maintain effective Personnel Security controls.
đŹ Act as the main contact for vetting and security enquiries, handling information sensitively and in line with data protection requirements.
đ¨ Support security incident reporting, follow-up actions and lessons learned.
đ Provide security support for key projects.
đŤ Manage site-specific security responsibilities, including issuing site passes.
đ˘ Support the wider Security Department with general security activities, communications and awareness campaigns.
đ Essential Experience & Qualifications
đť Experienced user of Microsoft Office, particularly Word and Excel
â Desirable Experience
đĄď¸ Previous experience in a similar security role
đ DISA Training
đ¤ Person Specification
â° Reliable and dependable
đ Self-motivated and proactive
đ¤ Honest and trustworthy
đ Well organised
đŻ Able to meet deadlines and prioritise workload
đ Methodical and accurate
đ Able to gain and maintain the appropriate security clearance
Due to the nature of work to be undertaken applicants will be required to meet certain residency criteria in order to attain a minimum level of UK security clearance if not already security cleared to a minimum SC level.
NOTICE TO CANDIDATES ON RECRUITMENT FRAUD - We are committed to safeguarding candidates from fraudulent activity associated with our recruitment process. Please note that we will never offer specialist CV writing services, request payment or ask for sensitive personal information during the recruitment process.
We are committed to equal treatment of candidates and promote, as well as foster all forms of diversity within our company. We believe that bringing together people with different backgrounds and perspectives is essential for creating innovative and impactful solutions. Skills, talent, and our peopleâs ability to dare are the only things that matter !. Bring your unique contributions and help us shape the future.
Leads day-to-day security operations across a cyber fusion center, managing threat response, incident escalations, analyst teams, and continuous improvement initiatives.
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers.âŻOur unique âAssess, Design, Protectâ methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. Thatâs why customers trust Avertium to deliver better security, improved compliance, and greater ROI.
The CFC Operations Manager is responsible for driving operational excellence across Avertiumâs Cyber Fusion Center (CFC). This leader oversees security operations, threat-informed operations, threat response, escalations, service quality, workforce readiness, and continuous improvement initiatives to ensure customers receive exceptional protection and service outcomes.
The role serves as the primary operational leader for the Cyber Fusion Center, creating alignment across analysis, engineering, threat intelligence while ensuring that operational performance, customer experience, and strategic objectives are achieved. The CFC Operations Manager is a visible customer-facing leader who builds confidence with customers, helps navigate critical situations, and represents Avertiumâs operational capabilities with professionalism and credibility.
Lead day-to-day Cyber Fusion Center operations across security analysis, incident response, escalations, threat-informed operations, and supporting engineering functions.
Drive excellence in operational performance, service delivery, customer outcomes, SLA attainment, quality standards, and team execution.
Establish and maintain accountability frameworks for case handling, escalation management, operational governance, and quality assurance.
Protect customers through Avertiumâs Threat Informed Operations model by continuously improving detection effectiveness, analyst decision making, response quality, and operational readiness.
Drive continuous improvement initiatives that increase scalability, consistency, efficiency, and customer satisfaction.
Lead workforce readiness, technical training, leadership development, and operational enablement programs.
Take Cyber Fusion Operations to the next level by identifying opportunities to improve processes, technology utilization, automation, reporting, service quality, and organizational effectiveness.
Lead operational reviews, KPI reporting, workload management, backlog oversight, and leadership decision-making cadences.
Manage customer-impacting escalations, operational risks, and high-priority incidents while ensuring timely communication and successful resolution.
Partner closely with Sales, Service Delivery, Product, and Engineering teams to support customer retention, expansion opportunities, customer advocacy, and long-term customer success.
Drive operational maturity initiatives, establish best practices, and create organizational alignment across teams responsible for customer protection and service delivery.
Build organizational capability through workforce planning, leadership development, coaching, succession planning, and performance management.
Serve as Avertiumâs operational executive with customers, providing leadership during business reviews, escalations, service discussions, operational planning sessions, and strategic customer engagements.
8+ years of experience in cybersecurity operations, managed security services, incident response, threat detection, or related disciplines.
5+ years of experience leading security operations teams and managers.
Deep understanding of SOC, MDR, and XDR service delivery models.
Experience leading operational excellence, service quality, and customer protection initiatives.
Strong understanding of incident response, threat detection, threat hunting, and threat-informed defense concepts.
Experience managing customer-facing escalations and executive-level customer relationships.
Demonstrated success improving operational performance through process optimization, automation, metrics, and organizational leadership.
Strong analytical, organizational, and decision-making skills.
Ability to communicate effectively with technical teams, executives, and customers.
Experience working cross-functionally with Sales, Service Delivery, Product Management, Engineering, and Executive Leadership.
Proven capability to balance operational execution with strategic leadership.
Bachelorâs degree in Cybersecurity, Information Technology, Business, or equivalent experience preferred.
Industry certifications such as CISSP, GIAC, GCIH, GCIA, ITIL, PMP, or equivalent preferred.
#LI-CS1
In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.
Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Senior Information Security Specialist manages third-party risk assessments, coordinates security testing and incident response, develops security policies, and ensures compliance with enterprise security frameworks.
What we do:
Halcyon is the industryâs first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware.
Who we are:
Halcyon was formed in 2021 by a team of cyber industry veterans after battling the scourge of ransomware (and advanced threats) for years at some of the largest global security vendors. Comprised of leaders from Cylance (now Blackberry), Accuvant (now Optiv), Fireye and ISS X-Force (now IBM), Halcyon is focused on building products and solutions for mid-market and enterprise customers.
As a remote-native, completely distributed global team, we recognize great talent can exist anywhere. We invite you to apply to a job youâre interested in and weâll work a plan to meet your needs.
The Role:
Halcyon is seeking a seasoned and collaborative Senior Information Security Specialist to support the advancement of our cybersecurity and GRC (Governance, Risk, and Compliance) programs. In this role, you will play a critical part in strengthening our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes and documentation. Your responsibilities will span operational security, risk assessment, policy development, and incident response preparedness.
Responsibilities:
Skills and Qualifications:
Bonus Skills and Qualifications:
Benefits:
Halcyon offers the following benefits to eligible employees:
Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.
Short and long-term disability coverage, basic life and AD&D insurance plans.
Medical and dependent care FSA options.
401k plan with a generous employer contribution.
Flexible PTO policy.
Parental leave.
Generous equity offerings.
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
The expected base salary range for this position is $120,000 - $160,000. Compensation varies based on a variety of factors which include (but are not limited to) role level, skills and competencies, qualifications, knowledge, location, and experience. In addition to base pay, certain roles are eligible to participate in our bonus or commission plans, as well as our benefits offers, and equity awards.
In accordance with applicable state and federal laws, the range provided is Halcyonâs reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. Base pay is one part of the total package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and equity in the Company.
We understand it takes a diverse team of highly intelligent, passionate, curious, and creative people to develop the exceptional product we are building. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity employer.
Leads privacy and security compliance program, develops policies and controls, manages vendor risk assessments, and embeds privacy/security best practices across products and operations.
About Nanit:
Welcome to Nanit, the high-growth baby tech company that is changing the way parents experience parenthood through the worldâs most advanced baby monitor and parenting products. In 2016, the Nanit baby monitor revolutionized the industry with computer-vision and machine-learning capabilities that helped parents understand their babyâs sleep patterns and allowed them to achieve better sleep quality. Now, the company has become the leader in the connected parenting space, with an incredible customer base of highly-engaged parents who look to Nanit as a source of information and expertise on their parenting journey.
About the Role:
Weâre seeking a highly motivated and detail-oriented privacy and security professional to lead and evolve Nanitâs privacy and security compliance program. Reporting directly to the Chief Legal & Administrative Officer, you will build and operationalize the policies, controls, and processes that protect our customersâ data and keep Nanit ahead of an evolving regulatory landscape. Youâll partner closely with Legal, Product, Engineering, and business teams to embed privacy and security best practices into how Nanit builds and operates.
What Youâll Be Doing:
Who You Are:
Why Youâll Love Working Here:
EEO, Salary and Location:
This role can be offered as either hybrid or fully remote, with a preference for East Coast candidates.
Salary Range: $130,000 to $150,000 targeted salary plus equity, benefits and unlimited PTO. Nanitâs total compensation package includes access to healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, and basic life insurance. Ultimately, in determining your pay, weâll consider your location, experience, and other job-related factors.
We are proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class.
Manages third-party risk assessments, security testing coordination, compliance initiatives, and incident response planning to strengthen enterprise security posture.
What we do:
Halcyon is the industryâs first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware.
Who we are:
Halcyon was formed in 2021 by a team of cyber industry veterans after battling the scourge of ransomware (and advanced threats) for years at some of the largest global security vendors. Comprised of leaders from Cylance (now Blackberry), Accuvant (now Optiv), Fireye and ISS X-Force (now IBM), Halcyon is focused on building products and solutions for mid-market and enterprise customers.
As a remote-native, completely distributed global team, we recognize great talent can exist anywhere. We invite you to apply to a job youâre interested in and weâll work a plan to meet your needs.
The Role:
Halcyon is seeking a seasoned and collaborative Senior Information Security Specialist to support the advancement of our cybersecurity and GRC (Governance, Risk, and Compliance) programs. In this role, you will play a critical part in strengthening our enterprise-wide security posture by coordinating across teams, managing third-party risk, supporting compliance initiatives, and maturing internal security processes and documentation. Your responsibilities will span operational security, risk assessment, policy development, and incident response preparedness.
Responsibilities:
Skills and Qualifications:
Bonus Skills and Qualifications:
Benefits:
Halcyon offers the following benefits to eligible employees:
Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.
Short and long-term disability coverage, basic life and AD&D insurance plans.
Medical and dependent care FSA options.
401k plan with a generous employer contribution.
Flexible PTO policy.
Parental leave.
Generous equity offerings.
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
The expected base salary range for this position is $120,000 - $160,000. Compensation varies based on a variety of factors which include (but are not limited to) role level, skills and competencies, qualifications, knowledge, location, and experience. In addition to base pay, certain roles are eligible to participate in our bonus or commission plans, as well as our benefits offers, and equity awards.
In accordance with applicable state and federal laws, the range provided is Halcyonâs reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. Base pay is one part of the total package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and equity in the Company.
We understand it takes a diverse team of highly intelligent, passionate, curious, and creative people to develop the exceptional product we are building. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity employer.
Leads privacy and security compliance program, develops policies and controls, manages risk assessments and vendor oversight to protect customer data and ensure regulatory compliance.
About Nanit:
Welcome to Nanit, the high-growth baby tech company that is changing the way parents experience parenthood through the worldâs most advanced baby monitor and parenting products. In 2016, the Nanit baby monitor revolutionized the industry with computer-vision and machine-learning capabilities that helped parents understand their babyâs sleep patterns and allowed them to achieve better sleep quality. Now, the company has become the leader in the connected parenting space, with an incredible customer base of highly-engaged parents who look to Nanit as a source of information and expertise on their parenting journey.
About the Role:
Weâre seeking a highly motivated and detail-oriented privacy and security professional to lead and evolve Nanitâs privacy and security compliance program. Reporting directly to the Chief Legal & Administrative Officer, you will build and operationalize the policies, controls, and processes that protect our customersâ data and keep Nanit ahead of an evolving regulatory landscape. Youâll partner closely with Legal, Product, Engineering, and business teams to embed privacy and security best practices into how Nanit builds and operates.
What Youâll Be Doing:
Who You Are:
Why Youâll Love Working Here:
EEO, Salary and Location:
This role can be offered as either hybrid or fully remote, with a preference for East Coast candidates.
Salary Range: $130,000 to $150,000 targeted salary plus equity, benefits and unlimited PTO. Nanitâs total compensation package includes access to healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, and basic life insurance. Ultimately, in determining your pay, weâll consider your location, experience, and other job-related factors.
We are proud to be an equal opportunity employer. We provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, veteran status, or any other protected class.
Builds detections and monitoring workflows, analyzes threat patterns, and develops automation to protect fintech infrastructure and respond to security incidents.
OnePay is the consumer fintech trusted by millions of Americans to make money better.
Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. Weâre fixing it. And weâre moving fast.
Weâre an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers.
Weâre backed by Walmart, the worldâs largest retailer, and Ribbit Capital, one of fintechâs most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining.
But what really sets OnePay apart is how we move. Our customers donât have time to wait⌠and neither do we. This place moves fast, and weâre looking for people who are:
Ready to run
Hungry and driven by urgency
Exceptional at what they do, with low ego
Comfortable operating in motion
As a Security and Threat Operations Engineer at OnePay, your work will have a direct impact on protecting our fast-moving fintech environment. You will turn production signals into actionable detection, response, and hardening initiatives, partnering closely with Product Security, Platform Security, and Engineering teams. Your efforts will enable us to proactively identify, monitor, and stop compromised behaviors across OnePayâs products and infrastructure, ensuring the continued safety and trust of our business and customers. You will:
Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments.
Review traffic patterns across APIs, authentication flows, and WAF telemetry to identify malicious activity, abuse patterns, and anomalous behavior.
Use AI responsibly as a force multiplier for triage, analysis, and workflow automation, while helping define guardrails for AI-enabled systems.
Help operate OnePayâs vulnerability management program by triaging, prioritizing, and driving remediation for findings from Wiz, vulnerability scanning, and related workflows.
Develop Python-based tooling and automation to improve investigations, enrichment, response, and operational scale.
Partner with Product Security to translate threat models, security reviews, and product risks into production detections and response playbooks.
Investigate security events end to end, including triage, scoping, containment support, and follow-through on remediation.
Support vulnerability management and operational security practices in ways that align with PCI and SOC 2 expectations.
Participate in proactive threat hunting, detection improvement, and a 24x7 security incident response on-call rotation.
5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment.
Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise.
Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts.
Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling.
Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms.
Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination.
Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases.
Experience with at least one major cloud provider, preferably AWS.
Working knowledge of identity and access systems, modern authentication flows, and the security implications of internet-facing applications and APIs.
Strong understanding of threat modeling, risk prioritization, and practical security controls across applications, infrastructure, and cloud environments.
Practical experience using AI tools in security workflows, along with sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability.
Excellent analytical, communication, and cross-functional collaboration skills, especially in environments where security needs to move quickly with product and engineering teams.
Drive and proactivity - everyone here is a builder and executor
We use Node and TypeScript on the server, leveraging the NestJS framework within a microservice-oriented architecture running on Kubernetes and AWS. On the client side, we build and ship product features for iOS, Android, and web platforms using React Native. We also embrace AI-assisted development, so engineers have their choice of Claude Code or Cursor to fit their workflow. While you donât need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly.
Competitive base salary, stock options, and health benefits from Day 1
401(k) plan with company match
Remote-friendly (US), flexible time off (FTO), and opportunities for growth
A high-growth, mission-driven, inclusive culture where your work has real impact
Our process varies by role. Most candidates go through:
AI-assisted initial screen
Interview with Talent Partner
Technical or Hiring Manager Interview
Team Interview
Executive Interview
Offer!
To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.