Security Engineer II (Defensive)

Flywire; Bengaluru; On-site; INR 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Competitive compensation

ESPP

Digital Disconnect & FlyBetter Days

Global Induction Program

Wellbeing Programs

Career Mobility

Job summary

Flywire is seeking a Security Engineer II to join the Defensive Platform Builder track in Bengaluru. You will build hands-on secure software design and cloud-native infrastructure defense, driving automation-first security in a fast-paced fintech environment and integrating security controls into public cloud and GitLab CI/CD pipelines.

You will work on secure SDLC, IAM reviews, AI security, and cross-functional collaboration, with opportunities to grow into independent ownership of assessments

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, Software Engineering or related field, or equivalent experience.
• 1-3 years in application or cloud security, software engineering, or related technical role.
• Exposure to manual code review, dependency or container scanning, and cloud security concepts.
• Familiarity with public cloud (AWS) and containerization (Docker).
• Comfort reading and writing code in Python, Java, or Node.js.
• Interest in AI security including OWASP Top 10 for LLMs and related risks.

Responsibilities

• Secure SDLC & CI/CD automation: integrate automated security requirements and validation tooling into pipelines.
• Build and maintain internal tooling and automated security controls.
• Collaborate with SRE/DevOps on secure public cloud architecture and IaC security scans (Terraform).
• Maintain IAM reviews and Zero Trust boundaries in containerized environments (Docker, Kubernetes).
• Configure automated security review workflows using LLM APIs for PR analysis.
• Protect AI features from prompt injection and insecure outputs; assist in source code/API security reviews.
• Participate in sprint planning to integrate security into the development lifecycle; provide actionable feedback.
• Seek mentorship to broaden security breadth within the team.

Skills

Python

Java

Node.js

CI/CD

AWS

Docker

Kubernetes

Security auditing

LLM security

Education

Bachelor's degree in Computer Science or related

Tools

GitLab CI/CD

Terraform

Job description

Are you ready to trade your job for a journey? Become a FlyMate!
Passion, excitement & global collaboration are all core to what it means to be a FlyMate. At Flywire, we’re on a mission to deliver the world’s most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

What more do we need to truly be unstoppable? Perhaps, that is you!

Who we are:

Flywire is a global payments enablement and software company, founded more than a decade ago to solve high-stakes, high-value payments. We’ve scaled into new regions and industry verticals and expanded our product offerings to deliver meaningful value to our clients across the world.

Today we support more than 5,300 clients across the global education, healthcare, travel & B2B industries, with diverse payment methods across 240 countries & territories and more than 140 currencies.

With over 1,400+ global FlyMates, representing more than 40 nationalities, and in 15 offices world-wide, we’re looking for FlyMates to join the next stage of our journey as we continue to grow.

Job Description

Job Summary:
As a Security Engineer II on the Defensive Platform Builder track you will build hands on experience across secure software design and cloud native infrastructure defence, working under the direction of senior and lead engineers. You will develop an automation first mindset within a high velocity fintech environment, supporting the integration of security controls into our public cloud and GitLab CI/CD pipelines while building towards independent ownership of AppSec and CloudSec work.

Responsibilities and Tasks (in order of priority)

1. Secure SDLC & CI/CD Automation

Support the integration of automated security requirements and validation tooling into engineering pipelines under the direction of senior team members.

Help build and maintain internal tooling and automated controls that reduce reliance on manual security checkpoints.

Work alongside SRE and DevOps teams on secure public cloud architecture, running Infrastructure as Code security scans (for example Terraform) and supporting network isolation controls.

Contribute to cloud Identity and Access Management reviews and help maintain Zero Trust boundaries within containerised environments such as Docker and Kubernetes.

3. AI Driven Security & Application Reviews

Assist in configuring and running automated security review workflows that use LLM APIs for pull request analysis.

Learn and apply technical controls that protect generative AI features against LLM specific risks such as prompt injection and insecure output handling.

Support source code audits and API security reviews, building towards independent ownership of more complex assessments over time.

4. Cross Functional Collaboration & Development

Take part in software development and infrastructure sprint planning to build a practical understanding of how security fits into the wider engineering lifecycle.

Provide clear, actionable feedback on code and configuration issues under the guidance of senior and lead engineers.

Actively seek mentorship from senior and lead security engineers to develop breadth across the wider security function.

Qualifications

• Education: Bachelor's degree in Computer Science, Cyber Security, Software Engineering or a related technical discipline, or equivalent practical experience.

Core Experience: indicative range [1to 3 years] of hands on experience in application or cloud security, software engineering or a closely related technical role.

Foundational Depth: exposure to manual code review, dependency or container scanning and cloud security concepts, gained through work experience, personal projects or study.

Cloud & DevOps Familiarity: working knowledge of a public cloud platform such as AWS, plus basic familiarity with containerisation (Docker) and CI/CD pipelines.

Technical Language Foundation: comfort reading and writing code in at least one modern language such as Python, Java or Node.js.

AI Security Awareness: a working interest in the OWASP Top 10 for LLMs and how AI features introduce new categories of risk.

Regulatory Awareness: a general understanding of standards such as PCI-DSS, SOC 2 or DORA, with willingness to build practical depth on the job.

Highly Preferred Certifications

Cloud & Architecture: AWS Certified Security - Specialty, Certified Kubernetes Security Specialist (CKS) or CISSP.

Modern AI Security: OffSec OSAI (Offensive Security AI Red Teamer).

Broader Depth: OSCP or GCIH, where candidates bring exposure to offensive or incident response work as a secondary strength.

Skills and Abilities

Balances a builder's engineering empathy with a security first mindset, treating software, SRE and product teams as operational allies rather than a source of friction.

Communicates clearly under pressure, able to distill cloud configuration drift or a live vulnerability into a plain, high impact risk summary for non-technical stakeholders.

Shows creative, novel problem solving across complex, non-standard application and cloud infrastructure challenges within a distributed financial microservices environment.

Resilience and analytical clarity in high-pressure scenarios, supporting transparent communication and contributing to risk-based decisions during active security incidents or compressed financial product launch windows.

Balances technical risk reduction with business enablement, supporting security infrastructure that serves as a competitive advantage and helps unblock global revenue and enterprise-client acquisition.

Additional Information

What We Offer:

• Competitive compensation
• Employee Stock Purchase Plan (ESPP)
• Competitive time off, including Digital Disconnect and FlyBetter Days to volunteer in a cause you believe in.
• Flying Start- Our immersive Global Induction Program (Meet our Execs & Global Teams)
• Work with brilliant people globally Learn more about their journeys by checking out #InsideFlywire on social media
• Wellbeing Programs (Mental Health, Wellness, Yoga/Pilates/HIIT Classes) with Global FlyMates
• Be a meaningful part in our success - every FlyMate makes an impact
• Great Talent & Development Programs (Managers Taking Flight – for new or aspiring managers, OneFlywire Career Mobility)

We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your "go-to" person for any questions.
#Li-Hybrid

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply