Security Engineer II – Defensive Ops & Cloud Security

Flywire; Boston (MA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Employee Stock Purchase Plan

Generous time off

Wellbeing programs (mental health, etc

Job summary

Flywire is seeking a Security Engineer II to join our global Security Engineering team in a hybrid Boston, MA setting. You will drive secure software design, cloud-native defense, and real-time incident detection across Flywire’s footprint.

The role blends offensive testing with defensive automation, partnering with SRE and software teams to embed security in CI/CD, IaC, and AI features. A strong background in SecOps, cloud security, and incident response is essential.

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, Software Engineering, or related field (or equivalent experience).
• 3+ years in SecOps/Incident Response/Penetration Testing with hands-on testing.
• Strong practical knowledge of AWS/public cloud topologies, containers, and IaC security scanning.

Responsibilities

• Secure SDLC & CI/CD: integrate automated security controls into pipelines.
• Hardening: create secure cloud architectures and enforce Zero Trust in containers.
• AI security: design review workflows for AI features and protect against prompt injection.
• Penetration testing: perform manual testing and exploit research across platforms.
• Incident response: lead containment, forensics, and rapid threat eradication.

Skills

Penetration testing

Cloud security

CI/CD

Python

JavaScript/Node.js

OWASP Top 10 (LLMs)

Threat detection

Incident response

Education

Bachelor's degree in CS/Cyber Security

Tools

AWS

Docker

Kubernetes

GitLab CI

Job description

Flywire is seeking a Security Engineer II to join our global Security Engineering team in a hybrid Boston, MA setting. You will drive secure software design, cloud-native defense, and real-time incident detection across Flywire’s footprint.

The role blends offensive testing with defensive automation, partnering with SRE and software teams to embed security in CI/CD, IaC, and AI features. A strong background in SecOps, cloud security, and incident response is essential.