Security Engineer II — Hybrid Cloud & AppSec Pro

Flywire; Massachusetts; Hybrid; USD 99,000 - 120,000; Full time

Job summary

Flywire is seeking a Security Engineer II to join the global Security Engineering team. You will own secure software design, cloud-native infrastructure defense, and real-time incident detection across Flywire’s global footprint.

In this role, you will integrate security controls into public cloud and GitLab CI/CD pipelines using AI workflows, and act as an operational responder for threat detection and red team activities.

Qualifications

• Bachelor's degree in Computer Science or related field.
• 3+ years in security engineering, SecOps, and pentest.
• Experience with manual penetration testing and incident containment.
• Knowledge of AWS, containers, network security, and GitLab CI pipelines.
• Proficiency in Python, Ruby on Rails, Java, or Node.js.
• Understanding of OWASP Top 10 for LLMs and cloud IAM.
• Experience with EDR, SIEM, and MITRE ATT&CK.
• Compliance with PCI-DSS, SOC 1/2, or DORA.

Responsibilities

• Secure SDLC and CI/CD automation across engineering pipelines.
• Hardening of cloud infrastructure and IaC security scans (Terraform).
• Design and deploy automated security review workflows using AI (LLMs).
• Perform offensive security testing and red teaming on financial platforms.
• Lead incident containment, forensic collection, and rapid threat eradication.

Skills

Security engineering

Cloud security

Incident response

Penetration testing

Python

Ruby on Rails

Java

Node.js

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Docker

Kubernetes

GitLab CI

Job description

Flywire is seeking a Security Engineer II to join the global Security Engineering team. You will own secure software design, cloud-native infrastructure defense, and real-time incident detection across Flywire’s global footprint.

In this role, you will integrate security controls into public cloud and GitLab CI/CD pipelines using AI workflows, and act as an operational responder for threat detection and red team activities.