OnePay Security Team

Security at OnePay

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

OnePay's AppSec philosophy and priorities are centered on embedding security into CI/CD pipelines and developer workflows, conducting threat modeling and risk-driven design reviews early in development, and automating vulnerability triage and scanning.
They also prioritize regulatory and compliance support (PCI, CCPA, GLBA) and maintaining platform safety, especially when scaling transaction monitoring.
The company emphasizes that security is at its core and takes user safety seriously.

The team

Public LinkedIn posts identify security and corporate-security leaders at OnePay, including Justin Hadley (who posts hiring messages referencing AppSec) and Gopal Dey (Engineering Manager for Corporate Security & IT Operations). Joubin Jabbari is listed as CISO. However, exact reporting lines, total team headcount, and organizational structure are not publicly available.

What they're working on

OnePay's initiatives and workflows include embedding security into CI/CD pipelines using policy-as-code tools (pre-commit hooks, SAST/SCA, IDE tool integrations), conducting threat modeling sessions and risk-driven design reviews early in development, and automating repetitive security tasks like vulnerability triage, code scanning, and tool orchestration.
They also perform secure code reviews and static/dynamic analysis, overseeing remediation with development teams. Additionally, OnePay has adopted Flagright for AI-native transaction monitoring and AML.