OANDA has been moving real money and real-time financial data across the internet since 1996 - one of the original platforms that brought forex trading to retail users online. The attack surface is substantial: a trading platform serving access to over 4,000 global instruments including forex, shares, ETFs, commodities, indices, and cryptocurrency CFDs. That means every session, every order, every price feed is a live wire between client funds and the open internet.
The threat model is layered. You're defending trading infrastructure that integrates with MetaTrader 5 and TradingView while distributing financial data across North America, Europe, and Singapore. Credential stuffing, API abuse, real-time data manipulation, and supply-chain risk through third-party platform integrations are all in scope. Compliance isn't a checkbox here - it's structural. OANDA signals a commitment to client fund protection and regulatory compliance across multiple jurisdictions, which means security work directly shapes product architecture, not just perimeter defense.
Technical domains span online trading platforms, financial data distribution, and FinTech systems at scale. The infrastructure has to support low-latency execution while enforcing strict access controls and audit trails on every transaction. If you're working security here, you're operating in a domain where a successful attack doesn't just leak data - it moves money.
