Security and Threat Operations Engineer

OnePay

. Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments .

Posted 11/2/2026full-timeBangalore • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat detection, incident response, and vulnerability management within cloud-native environments, utilizing Python for automation and AI for security workflows. Proficient in building and tuning detections while collaborating with cross-functional teams to enhance security posture.

Highest-signal resume keywords

5+ Years Experience In Information SecurityStrong Python Programming SkillsExperience Building And Tuning Detections In A SIEMFamiliarity With Wiz And Vulnerability ScanningExperience With Cloud Providers, Preferably AWS

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat DetectionIncident ResponseVulnerability ManagementSecurity OperationsDetection EngineeringAPI Telemetry AnalysisThreat ModelingRisk PrioritizationAutomation DevelopmentAI Tools Utilization

Soft Skills

Analytical SkillsCommunication SkillsCross-Functional Collaboration

Tools & Technologies

SIEMCloudWatchDatadogWizAI Tools

Industry Keywords

Cloud-Native EnvironmentsPCI ComplianceSOC 2 ComplianceFintechIdentity And Access Management

Tech Stack

Tools & technologies

AWSCloudPython

About the role

Key responsibilities & impact

Build and tune detections, alerts, and monitoring workflows across cloud, application, identity, and edge environments
Review API, authentication-flow, and WAF traffic telemetry to identify malicious activity, abuse patterns, and anomalous behavior
Use AI for triage, analysis, and workflow automation while helping define guardrails for AI-enabled systems
Operate the vulnerability management program by triaging, prioritizing, and driving remediation of findings from Wiz and vulnerability scanning
Develop Python-based tooling and automation for investigations, enrichment, response, and operational scale
Translate threat models, security reviews, and product risks into production detections and response playbooks
Investigate security events end to end, including triage, scoping, containment support, and remediation follow-through
Support vulnerability management and operational security practices aligned with PCI and SOC 2 expectations
Participate in proactive threat hunting and detection improvement
Participate in a 24x7 security incident response on-call rotation
Partner with Product Security, Platform Security, and Engineering teams
Work in OnePay’s fintech platform serving banking, savings, credit card, lending, investing, and crypto products

Requirements

What you’ll need

5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response
Experience in cloud-native or product-focused environments
Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry
Ability to distinguish attacker behavior from normal production noise
Ability to identify malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts
Strong Python programming skills
Experience building and tuning detections in a SIEM or detection platform
Experience with observability and logging systems such as CloudWatch, Datadog, or similar
Experience operating or supporting a vulnerability management program
Familiarity with Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases
Experience with at least one major cloud provider, preferably AWS
Working knowledge of identity and access systems and modern authentication flows
Understanding of security implications of internet-facing applications and APIs
Strong understanding of threat modeling, risk prioritization, and practical security controls
Practical experience using AI tools in security workflows
Sound judgment about AI-specific risks such as prompt injection, data leakage, excessive tool access, and weak auditability
Excellent analytical, communication, and cross-functional collaboration skills
English resume required

Benefits

Comp & perks

Competitive salary
Stock options
Benefits from Day 1
Comprehensive health insurance coverage
Accident and disability insurance
Term life insurance
Mental health support
Wellness programs
Hybrid work model
Vacation, sick, and other paid leave programs
Paid regional holidays
Monthly transport allowance
Work-from-home allowance
Inclusive, mission-driven culture