Senior Security Engineer (Offensive)

Flywire1; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Benefits offered by this job

Competitive compensation

Employee Stock Purchase Plan (ESPP)

Digital Disconnect / FlyBetter Days

Job summary

Flywire is seeking a Senior Security Engineer on the Active Operational Defender track to lead threat detection, penetration testing, and incident containment across its global footprint.

You will combine an attacker’s mindset with rigorous analytics to build high-fidelity detection engineering and serve as a primary responder during live incidents affecting Flywire’s payment networks.

Qualifications

• Bachelor's degree required in Computer Science, Cyber Security, Software Engineering or related discipline.
• A Master's degree is preferred.
• Hands-on offensive testing and incident response experience.
• Strong knowledge of cloud and API security.

Responsibilities

• Offensive penetration testing and red teaming across platforms and architectures.
• Threat detection engineering and SIEM deployment with automated alerting.
• Incident response, containment, forensics, and root-cause analysis.
• Cross-functional collaboration and mentorship for security engineers.

Skills

Penetration testing

Threat detection

Incident response

Mentorship

Education

Bachelor's degree in CS/Cyber Security/SE

Master's degree preferred

Tools

EDR platforms

SIEM systems

PCAP analysis

MITRE ATT&CK

Job description

Job Summary

As a Senior Security Engineer on the Active Operational Defender track you will act as a core operational lead for threat detection, penetration testing and incident containment across Flywire's global footprint. You will combine an aggressive attacker's mindset with the analytical rigour needed to build high fidelity detection engineering, serving as a primary responder when live incidents put our global payment networks at risk.

Responsibilities and Tasks

1. 1. Offensive Penetration Testing & Red Teaming

   Personally adopt an attacker's mindset to uncover complex logic flaws, carry out exploit research and emulate adversarial behaviour across financial platforms and product architectures.

   Run full spectrum manual security reviews that go beyond automated scanning, including source code audits, API exploitation and cloud configuration penetration testing.

   Where in scope, extend adversarial testing to internal and external AI features, probing for prompt injection and other LLM specific weaknesses.

2. 2. Threat Detection Engineering & SIEM

   Design, build and deploy high fidelity detection rules, behavioural analytics and automated alert workflows within the enterprise SIEM to catch anomalous activity at scale.

   Partner with SecOps to continuously tune detection coverage against the current threat landscape, referencing frameworks such as MITRE ATT&CK.

3. 3. Incident Response & Forensics

   Lead technical containment, forensic collection and rapid threat eradication during active, critical security incidents.

   Orchestrate post incident root cause analysis and translate findings into concrete engineering and detection improvements.

4. 4. Cross Functional Collaboration & Technical Mentorship

   Embed within security operations and engineering planning to ensure detection and response capability keeps pace with the platform.

   Provide expert level guidance on exploit chains and incident findings to engineering and leadership stakeholders.

   Mentor junior security engineers on offensive tooling, detection engineering and incident response practice.

Education

Bachelor's degree required in Computer Science, Cyber Security, Software Engineering or a related technical discipline. A Master's degree is preferred.

Core Experience

Indicative range [5 to 8 years] of progressive engineering experience across Security Operations, Incident Response and Penetration Testing.

Advanced Exploitation Depth

a proven track record of independently performing deep manual penetration testing, web application exploitation and incident containment rather than relying solely on commercial automated scanning platforms.

SecOps & Forensics Tool Stack

advanced working proficiency with modern EDR platforms, SIEM systems, network packet analysis (PCAP), threat intelligence frameworks (MITRE ATT&CK) and forensic collection tools.

Technical Language Depth

solid proficiency with a language such as Python, together with practical familiarity with common web and API technologies used to build exploit tooling.

AI & Adversarial Testing Mastery

expert level understanding of the OWASP Top 10 for LLMs and how to apply an attacker's mindset to generative AI features, including prompt injection and insecure output handling.

Regulatory & Compliance Competency

practical experience aligning technical testing and logging outputs with standards such as PCI-DSS (v4.0), SOC 1, SOC 2 and DORA.

Highly Preferred Certifications

• Hands-On Offensive & Red Team: OSCP, OSCE or SANS GXPN (GIAC Exploit Researcher and Advanced Penetration Tester)
• Incident Response & Defence: GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst) or a specialised Blue Team certification
• Modern AI Security: OffSec OSAI (Offensive Security AI Red Teamer)

Skills and Abilities

Combines an aggressive, attacker's mindset used to find vulnerabilities with the analytical discipline required to write clear, actionable detection rules.

Stays calm and analytically clear under intense pressure during active, live breach events or business critical system failures.

Communicates exploit chains and log anomalies clearly, turning technical detail into a plain, high impact risk profile for non-technical leadership.

Resilience and analytical clarity in high-pressure scenarios, with the ability to manage transparency and guide risk-based decisions during active security incidents or compressed financial product launch windows.

Balances technical risk reduction with business enablement, ensuring security infrastructure serves as a competitive advantage that unblocks global revenue and enterprise-client acquisition.

What We Offer

• Competitive compensation
• Employee Stock Purchase Plan (ESPP)
• Competitive time off, including Digital Disconnect and FlyBetter Days to volunteer in a cause you believe in.
• Flying Start - Our immersive Global Induction Program (Meet our Execs & Global Teams)
• Work with brilliant people globally Learn more about their journeys by checking out