CorpSec Security Engineer II

Remitly; Seattle (WA); On-site; USD 168,000 - 210,000; Full time

Benefits offered by this job

Flexible PTO

Health and dental

401k matching

Parental leave

Mental health benefits

ESPP

Education travel

Job summary

Remitly is seeking a Security Engineer for its Corporate Security team in Seattle to secure workforce, devices, SaaS and core applications. You will own security work end-to-end, partner with IT and other teams, and drive scalable, maintainable solutions.

The role emphasizes independent work, threat modeling, and building tools to automate security tasks while maintaining alignment with business risk.

Qualifications

• 3+ years in security or systems engineering.
• Proficient in Python and able to write and review code.
• Experience with AI tooling to accelerate security work.
• Project management experience from requirements to deployment.
• Ability to influence other teams and communicate risk clearly.
• Familiarity with security frameworks and cloud security.
• Hands-on with IaC such as Terraform or Pulumi.

Responsibilities

• Harden security controls across internal infrastructure and SaaS (Google Workspace, Okta, Salesforce, Slack, Workday).
• Operate zero-trust and least-privilege IAM enforcement with risk context.
• Build automation and tooling for risk detection and response.
• Secure endpoints and manage device trust posture and OS hardening.
• Participate in threat modeling, vendor security reviews and design reviews.
• Strengthen email and app controls and review OAuth workflows.
• Improve deployment, logging, monitoring; contribute to on-call rotation.
• Write runbooks and help onboard new team members.

Skills

Security engineering

Python

AI tooling

Project management

Risk assessment

Security frameworks

IaC

Cloud security

Tools

Terraform

Pulumi

Job description

Job Description

At Remitly, we believe everyone deserves the freedom to access, move, and manage their money wherever life takes them. Since 2011, we’ve tirelessly delivered on our promise to customers sending money globally, providing secure, simple, and reliable ways to manage their money, ensuring true peace of mind. Whether it’s supporting loved ones back home, growing a business across continents, or pursuing new opportunities abroad, we’re not just here to move money— we’re here to move our global customers forward.

We’re looking for builders, reimaginers, and global thinkers who want to work at the intersection of technology, trust, and transformation. If that’s you and you’re ready to do the most meaningful work of your career—we invite you to join over 2,800 passionate Remitlians worldwide who are united by our vision to transform lives with trusted financial services that transcend borders.

About the Role

As a Security Engineer on Remitly’s Corporate Security team, you will operate and improve the controls securing our workforce, devices, SaaS and core business applications. You will own your work independently, know when to seek help and build things that are logical, scalable and maintainable. Partnering with IT, Detection & Response, Infrastructure Security and other teams, you’ll execute on the team’s roadmap and help shape what comes next.

You Will

• Harden SaaS & infrastructure configure and maintain security controls across internal infrastructure and SaaS (Google Workspace, Okta, Salesforce, Slack, Workday). Find misconfigurations, fix them, document the fix. Enhance team-owned security technologies to better support internal assessments.
• Operate zero-trust controls support least-privilege IAM enforcement across our stack. Validate policy compliance and escalation gaps with full risk context.
• Build automation write tooling that improves risk detection, expedites response, or eliminates manual steps. Solutions should be logical, scalable and maintainable not one-off scripts.
• Secure endpoints & devices manage and improve MDM policies (Kandji, FleetDM), enforce device trust posture, support OS hardening baselines.
• Participate in reviews join threat models, vendor security assessments and product design reviews. Provide constructive feedback via thorough reviews. Grow toward running these independently.
• Strengthen email & app controls maintain email defense configurations, support OAuth app review workflows, flag and remediate risky integrations before they become incidents.
• Drive operational improvements improve how systems are deployed, tested, logged and monitored. Refactor where it helps. Participate in the team oncall rotation. Resolve root causes, not just symptoms.
• Document and define write and update runbooks. Help define team strategy. Explain standards to new hires. Act as an onboarding buddy when needed.

You Have

• 3+ years in security or systems engineering, with 1+ year focused in a relevant sub-domain (identity, endpoint, SaaS security, cloud, etc.) in a cloud-first environment.
• Proficiency in a programming language (Python preferred; willing to learn others). You can write code, review code and build tooling not just run scripts.
• Proficiency using AI tools (e.g. Claude Code, ChatGPT, Copilot) to accelerate security engineering work writing automation, analyzing configurations, drafting documentation and triaging findings. You treat AI as a force multiplier, not a crutch.
• Experience managing a project from start to finish requirements, milestones, triage, deployment.
• You’ve influenced other teams to take action on security risks by understanding the entire context and ensuring incentives are aligned.
• Knowledge of security industry frameworks relevant to your sub-domain and how to apply them.
• Real-world experience mitigating technical risks with enough depth to make recommendations based on business risk level without hand-holding from stakeholders.
• You can articulate the full impact of a risk, explain potential solutions and lay out trade-offs clearly.
• Familiarity with IaC (Terraform/Pulumi) or strong willingness to learn fast.

Nice-to-have

• Hands-on with any of: Okta, Google Workspace admin, MDM, SIEM, endpoint security, SASE/ZTNA.
• Experience w/ AWS or GCP you’ve been in a console, you’ve read a CloudTrail log.
• Familiarity with GitHub, CI/CD pipelines, or Kubernetes.
• Exposure to DLP, insider threat tooling, or SaaS posture management platforms (e.g. Obsidian, Trelica).
• You’ve written a runbook someone else actually used.

Compensation Details

The starting base salary range for this position is typically $168,000-$210,000. In the U.S., Remitly employees are shareholders in our Company and equity is part of our total compensation plan. Your recruiter can share more information about medical benefits offered, as well as other financial benefits and total compensation components offered with this role.

Our Benefits

• Flexible paid time off
• Health, dental, and vision + 401k plan with company matching
• Paid parental, medical, military and family care leave
• Mental Health & Family Forming Benefits
• Employee Stock Purchase Plan (ESPP)
• Continuing education and travel benefits

Our Connected Work Culture: Driving Innovation, Together

At Remitly, we believe that true innovation sparks when we come together. Our Connected Work Culture fosters dynamic in-person collaboration, where ideas ignite and challenging problems find solutions faster. For corporate team members, we have an in-office expectation of at least 50% of the time monthly, typically achieved by coming in three days a week. This creates a consistent, meaningful overlap that supports team norms and business needs. Managers also have the flexibility to set higher expectations based on their team’s specific needs. These intentional in-office moments are vital for deepening relationships, fueling creativity, and ensuring your impact is felt where it matters most.

Remitly is an E-Verify Employer

At Remitly, we are dedicated to ensuring that our workplace offers equal em

Remitly is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.