Senior Security Engineer (Defensive)

Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments. We’ve scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients around the world.

Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies.

With over 1,400+ global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow.

As a Senior Security Engineer on the Defensive Platform Builder track you will act as a technical authority for secure software design and cloud native infrastructure defence across Flywire's global footprint. You will bring an automation first mindset to a high velocity fintech environment, partnering with software engineering and SRE squads to embed security controls directly into our public cloud and GitLab CI/CD pipelines using AI workflows, so that our global payment systems stay secure by design and resilient in production.

Own, design and drive the end to end integration of automated security requirements and validation tooling into high velocity engineering pipelines.

Build custom internal tooling, wrappers and automated controls to replace manual security checkpoints, protecting development velocity while removing friction.

Partner directly with SRE and DevOps teams to establish secure public cloud architecture blueprints, manage Infrastructure as Code security scanning (for example Terraform) and enforce strict network isolation.

Architect and maintain cloud Identity and Access Management controls and enforce Zero Trust boundaries within containerised environments such as Docker and Kubernetes.

Embed within software development and infrastructure sprint planning from the inception phase so that security is built in from day one rather than bolted on.

Provide expert level, actionable code and configuration guidance directly to software and SRE engineers.

Mentor junior security, software and SRE engineers to raise technical resilience across the wider organisation.

Education: Bachelor's degree required in Computer Science, Cyber Security, Software Engineering or a related technical discipline. A Master's degree is preferred.

Core Experience: indicative range [5 to 8 years] of progressive engineering experience across Application Security and Cloud Architecture Defence.

Advanced Defensive Depth : a proven track record of independently running deep manual code and configuration reviews rather than relying solely on commercial automated scanning platforms.

Cloud & DevOps Engineering Stack: deep practical knowledge of AWS or similar public cloud topologies, containerisation and orchestration (Docker, Kubernetes), network security controls and high velocity GitLab CI pipelines.

Technical Language Depth: solid proficiency with modern web development frameworks and languages including Python, Ruby on Rails, Java and Node.js.

AI & Cryptographic Domain Mastery: expert level understanding of the OWASP Top 10 for LLMs, prompt engineering wrappers, applied cryptography, cloud network isolation and federated authentication architectures (OAuth2, SAML, OIDC, Zero Trust IAM).

Regulatory & Compliance Competency: practical experience aligning technical software and infrastructure controls with standards such as PCI-DSS (v4.0), SOC 1, SOC 2 and DORA.

Cloud & Architecture: AWS Certified Security - Specialty, Certified Kubernetes Security Specialist (CKS) or CISSP.

Modern AI Security: OffSec OSAI (Offensive Security AI Red Teamer).

Broader Depth: OSCP or GCIH, where candidates bring exposure to offensive or incident response work as a secondary strength.

We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for any questions.

#LI-Hybrid