Security Engineer

Job Summary

As a Senior Security Engineer on the Defensive Platform Builder track you will act as a technical authority for secure software design and cloud native infrastructure defence across Flywire's global footprint. You will bring an automation first mindset to a high velocity fintech environment, partnering with software engineering and SRE squads to embed security controls directly into our public cloud and GitLab CI/CD pipelines using AI workflows, so that our global payment systems stay secure by design and resilient in production.

Responsibilities and Tasks:

1. Secure SDLC & CI/CD Automation Ownership

• Own, design and drive the end to end integration of automated security requirements and validation tooling into high velocity engineering pipelines.
• Build custom internal tooling, wrappers and automated controls to replace manual security checkpoints, protecting development velocity while removing friction.

2. Cloud & Infrastructure Hardening

• Partner directly with SRE and DevOps teams to establish secure public cloud architecture blueprints, manage Infrastructure as Code security scanning (for example Terraform) and enforce strict network isolation.
• Architect and maintain cloud Identity and Access Management controls and enforce Zero Trust boundaries within containerised environments such as Docker and Kubernetes.

3. AI Driven Security & Application Reviews

• Design, prompt engineer and deploy automated security review workflows using LLM APIs to run real time code analysis and give context aware feedback on pull requests.
• Establish and enforce technical controls that protect internal and external generative AI features against LLM specific risks, including prompt injection, insecure output handling, model inversion and data poisoning.
• Run deep dive source code audits and API security reviews that go beyond automated scanning, surfacing complex logic flaws before they reach production.

4. Cross Functional Collaboration & Technical Mentorship

• Embed within software development and infrastructure sprint planning from the inception phase so that security is built in from day one rather than bolted on.
• Provide expert level, actionable code and configuration guidance directly to software and SRE engineers.
• Mentor junior security, software and SRE engineers to raise technical resilience across the wider organisation.

Qualifications

• Education: Bachelor's degree required in Computer Science, Cyber Security, Software Engineering or a related technical discipline. A Master's degree is preferred.
• Core Experience: indicative range [5 to 8 years] of progressive engineering experience across Application Security and Cloud Architecture Defence.
• Advanced Defensive Depth: a proven track record of independently running deep manual code and configuration reviews rather than relying solely on commercial automated scanning platforms.
• Cloud & DevOps Engineering Stack: deep practical knowledge of AWS or similar public cloud topologies, containerisation and orchestration (Docker, Kubernetes), network security controls and high velocity GitLab CI pipelines.
• Technical Language Depth: solid proficiency with modern web development frameworks and languages including Python, Ruby on Rails, Java and Node.js.
• AI & Cryptographic Domain Mastery: expert level understanding of the OWASP Top 10 for LLMs, prompt engineering wrappers, applied cryptography, cloud network isolation and federated authentication architectures (OAuth2, SAML, OIDC, Zero Trust IAM).
• Regulatory & Compliance Competency: practical experience aligning technical software and infrastructure controls with standards such as PCI-DSS (v4.0), SOC 1, SOC 2 and DORA.

Skills and Abilities

• Balances a builder's engineering empathy with a security first mindset, treating software, SRE and product teams as operational allies rather than a source of friction.
• Communicates clearly under pressure, able to distill cloud configuration drift or a live vulnerability into a plain, high impact risk summary for non-technical stakeholders.
• Shows creative, novel problem solving across complex, non-standard application and cloud infrastructure challenges within a distributed financial microservices environment.
• Resilience and analytical clarity in high-pressure scenarios, with the ability to manage transparency and guide risk-based decisions during active security incidents or compressed financial product launch windows.
• Balances technical risk reduction with business enablement, ensuring security infrastructure serves as a competitive advantage that unblocks global revenue and enterprise-client acquisition.