Security Automation Engineer
Free to start · No card · 5 credits the moment you sign up
Job description
About OnePay
OnePay is the consumer fintech trusted by millions of Americans to make money better.
Our financial system is broken. High fees, low rates, and too few ways to actually grow your money. We’re fixing it. And we’re moving fast.
We’re an all-in-one financial services platform that brings together banking, high-yield savings, credit cards, point-of-sale lending, investing, and crypto in one place. We also partner with employers, HCM providers, gig platforms, and others to deliver embedded financial services to millions of employees and frontline workers.
We’re backed by Walmart, the world’s largest retailer, and Ribbit Capital, one of fintech’s most respected investors, giving us rare scale, distribution, and the opportunity to build something truly category-defining.
But what really sets OnePay apart is how we move. Our customers don’t have time to wait… and neither do we. This place moves fast, and we’re looking for people who are:
Ready to run
Hungry and driven by urgency
Exceptional at what they do, with low ego
Comfortable operating in motion
The Role
As a Corporate Security Automation Engineer at OnePay, you will lead the design, implementation, automation, and optimization of our corporate security infrastructure. You will enhance security controls, align goals with business objectives, and drive automation and self-service capabilities to maintain a strong security posture in a rapidly scaling environment.
Work with IaC tools like Terraform to ensure enterprise configurations are steady, change-managed and machine-readable.
Design and deploy endpoint security measures aligned with industry standards, including vulnerability management.
Ensure a strong security posture for corporate SaaS applications by configuring vendor capabilities or building automations to meet OnePay standards.
Mature and manage data protection controls, including Data Loss Prevention (DLP) tools and secure data handling processes.
Build secure methods for sharing data with internal teams and external partners.
Collaborate with IT, Infrastructure, and Security teams to implement security measures, maintain critical corporate systems (ensuring availability and compliance), and drive process improvement through automation.
Develop and run incident response and disaster recovery plans, including tabletop exercises.
You bring
5+ years of IT experience, including 3+ years in enterprise security within cloud environments.
Expertise in IaC tools like Terraform (preferred), Puppet, Chef or Ansible.
Proven ability to lead projects, drive measurable security improvements through automation, leveraging scripting (Python, Go, and/or TypeScript).
Solid understanding of networking, authentication standards, and security frameworks (MITRE ATT&CK, NIST CSF, CIS benchmarks), with hands-on experience in ZTNA and DLP solutions (e.g., Netskope, Zscaler).
Skilled at simplifying technical concepts for non-technical audiences and influencing decisions.
Experience with workflow automation tools like n8n is a plus.
Tools We Use
We use Typescript front to back, with node and NestJS frameworks for server code and React Native for our iOS, Android, and Web clients. We run on a highly distributed cloud-native stack with Kubernetes and AWS, and scale and resiliency are at the heart of everything we build. We also embrace agentic development, so engineers have their choice of a variety of models and agent harnesses, including Claude Code, Cursor, Codex, and more to fit their workflow. While you don't need experience with our exact stack, familiarity with modern software engineering practices will help you ramp up quickly.
What We Offer
Competitive base salary, stock options, and health benefits from Day 1
401(k) plan with company match
Remote-friendly (US), flexible time off (FTO), and opportunities for growth
A high-growth, mission-driven, inclusive culture where your work has real impact
Standard Interview Process
Our process varies by role. Most candidates go through:
AI-assisted initial screen
Interview with Talent Partner
Technical or Hiring Manager Interview
Team Interview
Executive Interview
Offer!
Equal Employment Opportunity
To build technology and products that are used and loved by people and solve real-world problems, we need to build a team with many different perspectives and experiences. We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us at talent@onepay.com.
Prepare your application
Use the description above to assess your fit for OnePay. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.