Remote Jobs Now
Oneapp

Security and Threat Operations Engineer

Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “United States (Remote)”
Apply on Oneapp's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

Oneapp is hiring for a Security and Threat Operations Engineer role (full-time). See the official posting for full details.

Requirements

  • 5+ years of experience in information security, threat detection, security operations, detection engineering, or incident response, ideally in a cloud-native or product-focused environment.
  • Strong experience investigating suspicious activity in web, API, authentication, and infrastructure telemetry, with the ability to distinguish attacker behavior from normal production noise.
  • Demonstrated ability to review traffic and event patterns for signs of malicious activity, fraud, account abuse, credential attacks, reconnaissance, and exploitation attempts.
  • Strong Python programming skills and the ability to write maintainable code for automation, enrichment, analysis, and security operations tooling.
  • Experience building and tuning detections in a SIEM or detection platform and working with observability and logging systems such as CloudWatch, Datadog, or similar platforms.
  • Experience operating or supporting a vulnerability management program, including triage, prioritization, remediation tracking, and stakeholder coordination.
  • Familiarity with cloud and application security findings from platforms such as Wiz, including CNAPP, runtime, code, and vulnerability scanning use cases.
  • Experience with at least one major cloud provider, preferably AWS.

Summarized from the employer's posting — check the full posting for every requirement.